security-scan

Scan Claude Code configurations for security vulnerabilities and misconfigurations.

Updated May 1, 2026

Search Tags:#security #claude #configuration #vulnerabilities #scan #agentshield

Ready to run

npx skills add https://github.com/oguzhanguvenkaya/oguzhan_claude_code_configurations --skill security-scan-oguzhanguvenkaya

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/oguzhanguvenkaya/oguzhan_claude_code_configurations/tree/main/skills/security-scan
Command: npx skills add https://github.com/oguzhanguvenkaya/oguzhan_claude_code_configurations --skill security-scan-oguzhanguvenkaya

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit Claude Code configurations for security vulnerabilities, misconfigurations, and prompt injection risks using AgentShield.

Core Features & Use Cases

Scans CLAUDE.md for secret exposures and prompt injection patterns
Validates settings.json and MCP configs for risky permissions and hidden bypass flags
Checks hooks and agent definitions for data exfiltration and insecure access
Provides remediation guidance and secure defaults to harden configurations

Quick Start

Run a comprehensive security scan of your Claude Code setup to identify and remediate issues across .claude, MCP servers, hooks, and agents.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Claude Code configs for security vulnerabilities?▼

Scan Claude Code configs for security vulnerabilities by auditing CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions to detect hardcoded secrets, prompt injection patterns, and data exfiltration risks.

What security risks exist in CLAUDE.md and MCP server configurations?▼

Security risks in CLAUDE.md and MCP server configurations include hardcoded secrets, prompt injection patterns, risky permissions, hidden bypass flags, and insecure agent access that can lead to data exfiltration.

Can I detect data exfiltration risks in Claude Code hooks and agent definitions?▼

Detect data exfiltration risks in Claude Code hooks and agent definitions by validating configurations against secure defaults to identify insecure access patterns and unauthorized data transmission behaviors.

How do I remediate permission gaps in settings.json for Claude Code?▼

Remediate permission gaps in settings.json for Claude Code by applying actionable remediation guidance and secure defaults to harden risky permissions and remove hidden bypass flags.

Do I need AgentShield to audit Claude Code configurations?▼

Use AgentShield to audit Claude Code configurations because it provides the automated scanning engine that identifies and remediates security vulnerabilities, misconfigurations, and prompt injection risks across your repositories.