security-scan

Name: security-scan
Availability: InStock
Author: Liam

Scan Claude Code configurations for security vulnerabilities and misconfigurations.

Updated Feb 13, 2026

Search Tags:#security #vulnerability #claude #configuration #scan #agentshield

Ready to run

npx skills add https://github.com/LiamVDB1/opencode-config --skill security-scan-liamvdb1

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/LiamVDB1/opencode-config/tree/main/skills/security-scan
Command: npx skills add https://github.com/LiamVDB1/opencode-config --skill security-scan-liamvdb1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill safeguards your Claude Code configurations by proactively identifying and flagging security vulnerabilities, misconfigurations, and potential injection risks within your project's sensitive files.

Core Features & Use Cases

Comprehensive Auditing: Scans critical configuration files like CLAUDE.md, settings.json, and MCP server definitions for known security weaknesses.
Vulnerability Detection: Identifies hardcoded secrets, overly permissive access controls, command injection vectors, and supply chain risks.
Use Case: Before deploying a new Claude Code project or after significant configuration changes, run this scan to ensure your setup adheres to security best practices and mitigates potential threats.

Quick Start

Run a security scan on your current project's Claude Code configuration directory.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Claude Code configurations for security vulnerabilities?▼

To scan Claude Code configurations for security vulnerabilities, run this Skill to analyze CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions. It detects hardcoded secrets, injection risks, and overly permissive settings using AgentShield.

What security misconfigurations can be found in Claude Code settings.json and CLAUDE.md files?▼

Security misconfigurations found in Claude Code settings.json and CLAUDE.md files include hardcoded secrets, overly permissive access controls, command injection vectors, and supply chain risks. The scan audits these files to flag known security weaknesses.

Does AgentShield support auto-fixing identified vulnerabilities in MCP server definitions?▼

Yes, AgentShield supports optional auto-fixing of identified vulnerabilities in MCP server definitions and other configuration files. After the deterministic security audit detects issues, you can apply the auto-fix feature to resolve them.

When do I need to run a security audit on my Claude Code project setup?▼

You need to run a security audit on your Claude Code project setup before deploying a new project or after significant configuration changes. This ensures your setup adheres to security best practices and mitigates potential threats.

Can I detect command injection vectors and supply chain risks in Claude Code hooks?▼

Yes, you can detect command injection vectors and supply chain risks in Claude Code hooks. The Skill scans hook definitions alongside agent definitions and MCP servers to identify these potential injection risks.