skills.rest
oguzhanguvenkaya
oguzhanguvenkayaCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan Claude Code configurations for security vulnerabilities and misconfigurations.

Updated May 1, 2026
Search Tags:#security#claude#configuration#vulnerabilities#scan#agentshield
One-click install
npx skills add https://github.com/oguzhanguvenkaya/oguzhan_claude_code_configurations --skill security-scan-oguzhanguvenkaya
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/oguzhanguvenkaya/oguzhan_claude_code_configurations/tree/main/skills/security-scan
Command: npx skills add https://github.com/oguzhanguvenkaya/oguzhan_claude_code_configurations --skill security-scan-oguzhanguvenkaya

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit Claude Code configurations for security vulnerabilities, misconfigurations, and prompt injection risks using AgentShield.

Core Features & Use Cases

  • Scans CLAUDE.md for secret exposures and prompt injection patterns
  • Validates settings.json and MCP configs for risky permissions and hidden bypass flags
  • Checks hooks and agent definitions for data exfiltration and insecure access
  • Provides remediation guidance and secure defaults to harden configurations

Quick Start

Run a comprehensive security scan of your Claude Code setup to identify and remediate issues across .claude, MCP servers, hooks, and agents.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Claude Code configs for security vulnerabilities?▼

Scan Claude Code configs for security vulnerabilities by auditing CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions to detect hardcoded secrets, prompt injection patterns, and data exfiltration risks.

What security risks exist in CLAUDE.md and MCP server configurations?▼

Security risks in CLAUDE.md and MCP server configurations include hardcoded secrets, prompt injection patterns, risky permissions, hidden bypass flags, and insecure agent access that can lead to data exfiltration.

Can I detect data exfiltration risks in Claude Code hooks and agent definitions?▼

Detect data exfiltration risks in Claude Code hooks and agent definitions by validating configurations against secure defaults to identify insecure access patterns and unauthorized data transmission behaviors.

How do I remediate permission gaps in settings.json for Claude Code?▼

Remediate permission gaps in settings.json for Claude Code by applying actionable remediation guidance and secure defaults to harden risky permissions and remove hidden bypass flags.

Do I need AgentShield to audit Claude Code configurations?▼

Use AgentShield to audit Claude Code configurations because it provides the automated scanning engine that identifies and remediates security vulnerabilities, misconfigurations, and prompt injection risks across your repositories.

Related Skills

Explore More Software Engineering Skills→
Sake-TeamSake-Team

security-scan

Scan Claude Code configurations for vulnerabilities and misconfigurations.

Official
Advanced
geoffjaygeoffjay
8

sinatra-security

Secure Sinatra applications against CSRF, XSS, and SQL injection.

Community
Intermediate
alexica00alexica00

security-audit

Automate security audits of codebases and Claude Code configurations.

Community
Advanced
kouisokouiso

security-scan

Scan Claude Code configurations for security vulnerabilities and misconfigurations.

Community
Advanced