skills.rest
officechbusinessservices-creator
officechbusinessservices-creatorCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan Claude Code configuration files for security misconfigurations and injection risks.

Updated Feb 4, 2026
Search Tags:#security#claude-code#scan#config-security#agentshield
One-click install
npx skills add https://github.com/officechbusinessservices-creator/CompliCore --skill security-scan-officechbusinessservices-creator
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/officechbusinessservices-creator/CompliCore/tree/main/.claude/skills/security-scan
Command: npx skills add https://github.com/officechbusinessservices-creator/CompliCore --skill security-scan-officechbusinessservices-creator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify security issues in Claude Code configurations to prevent misconfigurations and vulnerabilities.

Core Features & Use Cases

  • Prerequisites: AgentShield must be installed and available for scanning.
  • Scope: scans CLAUDE.md, settings.json, mcp.json, hooks/, and agents/*.md for misconfigurations and injection risks.
  • Outputs: terminal, JSON, Markdown, and HTML reports, with optional auto-fix and deep analysis modes.
  • Quick hardening: initialize a secure .claude/ config scaffold and integrate into CI pipelines.

Quick Start

Run a security scan against your .claude directory to identify hardcoded secrets, risky MCP servers, and prompt injection patterns.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Claude Code configurations for security vulnerabilities?▼

To scan Claude Code configurations for security vulnerabilities, run a security scan against your .claude directory to identify hardcoded secrets, risky MCP servers, and prompt injection patterns in CLAUDE.md, settings.json, and mcp.json.

What security issues should I look for in CLAUDE.md and MCP configs?▼

Security issues in CLAUDE.md and MCP configs include hardcoded secrets, risky MCP servers, and prompt injection patterns. Scanning helps identify misconfigurations and injection risks across agents and hooks to prevent vulnerabilities.

Does AgentShield work with Claude Code settings.json and hooks for automated security checks?▼

Yes, AgentShield works with Claude Code to scan settings.json, hooks/, and agents/*.md for misconfigurations. It requires AgentShield to be installed and available to perform automated security checks and identify injection risks.

How do I integrate Claude Code security scans into CI pipelines?▼

To integrate Claude Code security scans into CI pipelines, initialize a secure .claude/ config scaffold and run automated scans. You can output results in terminal, JSON, Markdown, or HTML formats to enable continuous security hygiene checks across repositories.

Can I automatically fix security misconfigurations found in .claude directories?▼

Yes, you can automatically fix security misconfigurations found in .claude directories using the optional auto-fix mode. The scan evaluates configurations and applies fixes while offering deep-analysis modes for comprehensive vulnerability remediation.

What is the best way to perform a periodic security hygiene check across multiple repositories?▼

The best way to perform periodic security hygiene checks across multiple repositories is to run automated configuration scans targeting CLAUDE.md, settings.json, and mcp.json files, generating Markdown or HTML reports to track vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
cescraflicescrafli

security-scan

Scan .claude directory configurations for security vulnerabilities and misconfigurations.

Community
Intermediate
riftzen-bitriftzen-bit

security-scan

Scan Gemini Code configurations for security vulnerabilities and misconfigurations.

Community
Advanced
weside-aiweside-ai

audit

Automate security audits in code repositories and summarize JSON findings.

Official
Advanced
mitul-bhatiamitul-bhatia

security-scan

Audit Claude Code configurations for security vulnerabilities using AgentShield.

Community
Intermediate