security-scan

Scan Claude Code configurations for vulnerabilities and misconfigurations using AgentShield.

2|Updated Mar 3, 2026

Search Tags:#security #vulnerability #injection #claude-code #scan #misconfigurations #agentshield

Ready to run

npx skills add https://github.com/MomoDaviluke/star-citizen-promotion --skill security-scan-momodaviluke

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/MomoDaviluke/star-citizen-promotion/tree/main/.agents/skills/ecc/security-scan
Command: npx skills add https://github.com/MomoDaviluke/star-citizen-promotion --skill security-scan-momodaviluke

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Security Scan Skill helps teams proactively identify vulnerabilities and misconfigurations in Claude Code configurations to prevent security incidents.

Core Features & Use Cases

Automates scanning of CLAUDE.md for sensitive data exposure and prompt injection vectors.
Validates settings.json, MCP configs, hooks, and agent definitions for misconfigurations and risky patterns.
Suitable for new project onboarding, pre-commit checks, and periodic security hygiene.

Quick Start

Run a quick scan of your current repository's Claude Code configuration to surface high-priority security issues.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Claude Code configurations for security vulnerabilities and prompt injection risks?▼

To scan Claude Code configurations for security vulnerabilities, you can use this Skill to automate the detection of prompt-injection vectors, hardcoded secrets, and risky automation patterns across your project files. It evaluates CLAUDE.md, settings.json, MCP configurations, hooks, and agent definitions to surface high-priority security issues.

What types of misconfigurations and security risks can be detected in Claude Code settings?▼

Security scanning for Claude Code settings identifies overly permissive permissions, hardcoded secrets, and risky automation patterns. It validates your settings.json, MCP configurations, hooks, and agent definitions to prevent potential security incidents caused by misconfigurations.

Do I need AgentShield installed to run a security scan on Claude Code files?▼

Yes, you need AgentShield installed to execute this security scan on Claude Code files. The Skill relies on AgentShield to perform the underlying analysis of your CLAUDE.md, settings.json, and MCP configurations to detect vulnerabilities and report findings.

Can I integrate Claude Code security scanning into CI/CD pipelines and CLI workflows?▼

Yes, you can integrate this Claude Code security scanning into CI/CD pipelines and CLI workflows. The Skill supports standard outputs, allowing you to automate security checks during pre-commit validations, new project onboarding, and periodic security hygiene assessments.

How does automated auditing handle sensitive data exposure in CLAUDE.md files?▼

Automated security auditing scans CLAUDE.md files to identify sensitive data exposure and prompt injection vectors. By analyzing the configuration content, it proactively reports vulnerabilities and misconfigurations to help teams prevent security incidents before deployment.