security-scan

Scan Claude Code configurations for security vulnerabilities using AgentShield.

3|1|Updated Mar 4, 2026
One-click install
npx skills add https://github.com/oabdelmaksoud/AGI-FARM-PLUGIN --skill security-scan-oabdelmaksoud
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/oabdelmaksoud/AGI-FARM-PLUGIN/tree/main/ecc-resources/docs/ja-JP/skills/security-scan
Command: npx skills add https://github.com/oabdelmaksoud/AGI-FARM-PLUGIN --skill security-scan-oabdelmaksoud

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ecc-agentshield, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need to identify and mitigate security vulnerabilities within Claude Code configurations, preventing potential breaches and ensuring compliance.

Core Features & Use Cases

  • Vulnerability Scanning: Detects hardcoded secrets, injection risks, and misconfigurations in CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
  • Automated Remediation: Offers options for automatic fixing of identified security issues.
  • Use Case: Before committing changes to a sensitive project, run this security scan to ensure no API keys are exposed and no dangerous command injections are possible through hooks or agent configurations.

Quick Start

Run a security scan on the current project's .claude/ directory.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my Claude Code configuration for security vulnerabilities?

To scan your Claude Code configuration for security vulnerabilities, use this Skill to detect hardcoded secrets, injection risks, and misconfigurations in your .claude/ directory using AgentShield.

What types of security risks can be found in CLAUDE.md and settings.json files?

Security risks in CLAUDE.md and settings.json files include hardcoded API keys, dangerous command injections via hooks, and misconfigurations in MCP servers and agent definitions.

Can I automatically fix security issues detected in my MCP servers and hooks?

Yes, you can automatically fix security issues detected in MCP servers and hooks, as the scan offers automated remediation options for identified vulnerabilities.

Does the security scan require AgentShield to check agent definitions?

Yes, the security scan requires the AgentShield dependency to accurately check agent definitions and identify potential security vulnerabilities in your configuration.

What is the best way to prevent API key exposure before committing changes?

The best way to prevent API key exposure before committing changes is to run a security scan on your project's .claude/ directory to ensure no secrets are exposed and no dangerous command injections are possible.