skills.rest
mbadoz
mbadozCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Audit Claude Code configurations for security vulnerabilities and misconfigurations.

2|Updated Apr 5, 2026
Search Tags:#security#vulnerability#configuration#mcp#claude-code#scan#agentshield
One-click install
npx skills add https://github.com/mbadoz/mbadoz-skills --skill security-scan-mbadoz
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/mbadoz/mbadoz-skills/tree/main/plugins/built-planner/skills/built-planner/references/skills/security-scan
Command: npx skills add https://github.com/mbadoz/mbadoz-skills --skill security-scan-mbadoz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit Claude Code configurations for security vulnerabilities, misconfigurations, and injection risks across CLAUDE.md, settings.json, MCP configs, and agent definitions.

Core Features & Use Cases

  • AgentShield-based scanning of Claude Code setup to identify misconfigurations and risky patterns.
  • Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions for security issues.
  • Use Case: When starting a new Claude Code project or after config changes, run a security scan to ensure a safe baseline.

Quick Start

Run AgentShield against the current project’s .claude directory to generate a security report.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Claude Code configurations for security vulnerabilities?▼

To scan Claude Code configurations for security vulnerabilities, run AgentShield against your project's .claude directory to audit CLAUDE.md, settings.json, and MCP configs for misconfigurations and injection risks.

What security risks exist in Claude Code MCP configs and CLAUDE.md files?▼

Security risks in Claude Code MCP configs and CLAUDE.md files include misconfigurations, risky patterns, and injection risks across agent definitions and hooks. AgentShield identifies these vulnerabilities during a configuration audit.

When should I run a security scan on my Claude Code project setup?▼

You should run a security scan on your Claude Code project setup during initial project setup, after modifying CLAUDE.md or MCP configurations, and before committing configuration changes to ensure a safe baseline.

Does AgentShield work with Claude Code to auto-fix configuration security issues?▼

AgentShield works with Claude Code to scan configurations and offers options for auto-fix and CI integration. It audits the .claude directory to identify and help resolve security vulnerabilities.

Can I integrate Claude Code configuration scanning into my CI pipeline?▼

You can integrate Claude Code configuration scanning into your CI pipeline using AgentShield's CI integration options. This automates security audits of your .claude directory to catch misconfigurations before commits.

What does an AgentShield security scan check in a Claude Code project?▼

An AgentShield security scan checks Claude Code setups by auditing CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions. It identifies security vulnerabilities and risky patterns within these configuration files.

Related Skills

Explore More Software Engineering Skills→
Sake-TeamSake-Team

security-scan

Scan Claude Code configurations for vulnerabilities and misconfigurations.

Official
Advanced
riftzen-bitriftzen-bit

security-scan

Scan Gemini Code configurations for security vulnerabilities and misconfigurations.

Community
Advanced
TeiNamTeiNam
12

security-scan

Scan agent configurations for security vulnerabilities and misconfigurations.

Community
Intermediate
BinyaminEdenBinyaminEden
26

security-scan

Audit Claude Code .claude configuration directories for security vulnerabilities.

Community
Intermediate