security-scan

Scan Claude Code configurations for security vulnerabilities and misconfigurations using AgentShield.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/Miles0sage/claude-ultimate-stack --skill security-scan-miles0sage
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/Miles0sage/claude-ultimate-stack/tree/main/skills/security-scan
Command: npx skills add https://github.com/Miles0sage/claude-ultimate-stack --skill security-scan-miles0sage

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need to identify and mitigate security vulnerabilities within Claude Code configurations, preventing potential breaches and ensuring compliance.

Core Features & Use Cases

  • Vulnerability Scanning: Detects hardcoded secrets, injection risks, and misconfigurations in CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
  • Automated Remediation: Offers auto-fixing capabilities for common security issues.
  • Use Case: Before deploying a new Claude Code project or after significant configuration changes, run this skill to get a security grade and a detailed report of potential risks, ensuring your setup is hardened against common attack vectors.

Quick Start

Run npx ecc-agentshield scan to audit your current project's .claude/ directory for security issues.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Claude Code configurations for security vulnerabilities?

To scan Claude Code configurations for security vulnerabilities, run a configuration audit using AgentShield. This identifies risks in CLAUDE.md, settings.json, MCP servers, and hooks, providing a detailed security report and grade.

What security risks exist in CLAUDE.md and MCP server configurations?

Security risks in CLAUDE.md and MCP server configurations include hardcoded secrets, injection patterns, and misconfigurations. A vulnerability scanning tool detects these threats by analyzing agent definitions and settings files to ensure compliance.

Can I automatically fix hardcoded secrets and injection risks in Claude Code?

You can automatically fix hardcoded secrets and injection risks in Claude Code using automated remediation features. The scanner offers optional auto-fixing capabilities to resolve common security issues found during the configuration audit.

Does AgentShield work with settings.json and agent definitions for compliance auditing?

AgentShield works with settings.json and agent definitions to perform compliance auditing. It scans these configuration files to detect misconfigurations and vulnerabilities, ensuring your Claude Code setup is hardened against attack vectors.

When should I run a configuration audit on my Claude Code project?

You should run a configuration audit on your Claude Code project before deploying a new project or after significant configuration changes. This ensures your setup is hardened and identifies potential security risks early.