skills.rest
LiamVDB1
LiamVDB1COMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan Claude Code configurations for security vulnerabilities and misconfigurations.

Updated Feb 13, 2026
Search Tags:#security#vulnerability#claude#configuration#scan#agentshield
One-click install
npx skills add https://github.com/LiamVDB1/opencode-config --skill security-scan-liamvdb1
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/LiamVDB1/opencode-config/tree/main/skills/security-scan
Command: npx skills add https://github.com/LiamVDB1/opencode-config --skill security-scan-liamvdb1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill safeguards your Claude Code configurations by proactively identifying and flagging security vulnerabilities, misconfigurations, and potential injection risks within your project's sensitive files.

Core Features & Use Cases

  • Comprehensive Auditing: Scans critical configuration files like CLAUDE.md, settings.json, and MCP server definitions for known security weaknesses.
  • Vulnerability Detection: Identifies hardcoded secrets, overly permissive access controls, command injection vectors, and supply chain risks.
  • Use Case: Before deploying a new Claude Code project or after significant configuration changes, run this scan to ensure your setup adheres to security best practices and mitigates potential threats.

Quick Start

Run a security scan on your current project's Claude Code configuration directory.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Claude Code configurations for security vulnerabilities?▼

To scan Claude Code configurations for security vulnerabilities, run this Skill to analyze CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions. It detects hardcoded secrets, injection risks, and overly permissive settings using AgentShield.

What security misconfigurations can be found in Claude Code settings.json and CLAUDE.md files?▼

Security misconfigurations found in Claude Code settings.json and CLAUDE.md files include hardcoded secrets, overly permissive access controls, command injection vectors, and supply chain risks. The scan audits these files to flag known security weaknesses.

Does AgentShield support auto-fixing identified vulnerabilities in MCP server definitions?▼

Yes, AgentShield supports optional auto-fixing of identified vulnerabilities in MCP server definitions and other configuration files. After the deterministic security audit detects issues, you can apply the auto-fix feature to resolve them.

When do I need to run a security audit on my Claude Code project setup?▼

You need to run a security audit on your Claude Code project setup before deploying a new project or after significant configuration changes. This ensures your setup adheres to security best practices and mitigates potential threats.

Can I detect command injection vectors and supply chain risks in Claude Code hooks?▼

Yes, you can detect command injection vectors and supply chain risks in Claude Code hooks. The Skill scans hook definitions alongside agent definitions and MCP servers to identify these potential injection risks.

Related Skills

Explore More Software Engineering Skills→
brainbrewlabsbrainbrewlabs
7

security-scan

Scan Claude Code configuration files for security vulnerabilities and misconfigurations.

Official
Advanced
jeremylongshorejeremylongshore
2.6k

scanning-for-vulnerabilities

Scan codebases, dependencies, and configurations for security vulnerabilities and CVEs.

Community
Intermediate
Hack23Hack23
235

secrets-management

Enforce environment-based configuration and rotation policies for credentials.

Official
Advanced
89jobrien89jobrien
4

dependency-management

Analyze dependency manifests to update packages, scan vulnerabilities, and verify licenses.

Community
Intermediate