skills.rest
Michae2xl
Michae2xlCOMMUNITY
Explore all skills by this author →
Website𝕏@michae2xlGitHub

security-scan

Scan Claude Code configurations for security vulnerabilities using AgentShield.

1|Updated Apr 7, 2026
Search Tags:#vulnerability assessment#security audit#Claude Code#configuration management#security scan
One-click install
npx skills add https://github.com/Michae2xl/claude-skills-michael --skill security-scan-michae2xl
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/Michae2xl/claude-skills-michael/tree/main/skills/security-scan
Command: npx skills add https://github.com/Michae2xl/claude-skills-michael --skill security-scan-michae2xl

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the scanning of Claude Code configurations for security vulnerabilities and misconfigurations, helping users identify potential risks and apply fixes before deployment.

Core Features & Use Cases

  • Security Vulnerability Scan: Automatically scan CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions for potential security risks.
  • Integration with AgentShield: Utilizes AgentShield to check for hardcoded secrets, auto-run instructions, prompt injection patterns, and more.
  • Custom Scan Options: Allows users to scan specific paths, set severity levels, and choose between different output formats (JSON, Markdown, HTML).

Quick Start

Run a security scan for the current project's .claude/ directory by executing npx ecc-agentshield scan.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security scan on Claude Code configurations?▼

You can scan Claude Code configurations for security vulnerabilities by executing `npx ecc-agentshield scan` to check your `.claude/` directory for hardcoded secrets, auto-run instructions, and risky MCP servers.

What security vulnerabilities can be detected in Claude Code settings and MCP servers?▼

Security scanning of Claude Code configurations detects hardcoded secrets, auto-run instructions, prompt injection patterns, and risky MCP servers across your CLAUDE.md and settings.json files.

Can I customize my security audit to scan specific paths and output formats?▼

Yes, security vulnerability scanning allows you to scan specific paths, set severity levels, and choose between JSON, Markdown, or HTML output formats for your configuration audit results.

What is the best way to prevent prompt injection in Claude Code agent definitions?▼

Automated security vulnerability scanning using AgentShield checks your Claude Code agent definitions and hooks for prompt injection patterns and misconfigurations before deployment.

Does this security scan require any external dependencies or tools to run?▼

No external dependencies are required. The security scan utilizes AgentShield via the `npx ecc-agentshield scan` command to directly audit your Claude Code configuration files.

Related Skills

Explore More Software Engineering Skills→
fltmanfltman
87

project-setup

Scaffold new projects with CLAUDE.md and slash commands.

Community
Intermediate
cyphercr0wcyphercr0w
8

security-scan

Scan Claude Code configurations for security vulnerabilities and misconfigurations.

Community
Intermediate
gganbukim1gganbukim1

security-scan

Scan Claude Code configuration files for security vulnerabilities and injection risks.

Community
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced