skills.rest
ryasrk
ryasrkCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan Claude Code configuration files for security vulnerabilities and misconfigurations.

Updated Mar 12, 2026
Search Tags:#security#vulnerability#claude code#configuration#scan#agent shield
One-click install
npx skills add https://github.com/ryasrk/AgentBrokeTheMatrix-CopilotVersion --skill security-scan-ryasrk
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/ryasrk/AgentBrokeTheMatrix-CopilotVersion/tree/main/.github/skills/security-scan
Command: npx skills add https://github.com/ryasrk/AgentBrokeTheMatrix-CopilotVersion --skill security-scan-ryasrk

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies and helps remediate security vulnerabilities and misconfigurations within your Claude Code project's configuration files, preventing potential exploits and ensuring a more secure development environment.

Core Features & Use Cases

  • Vulnerability Detection: Scans CLAUDE.md, settings.json, MCP configs, hooks, and agent definitions for common security risks.
  • Automated Remediation: Offers auto-fixing capabilities for certain identified issues, such as replacing hardcoded secrets.
  • Use Case: Before deploying a new agent or committing sensitive configuration changes, run this scan to catch potential security flaws like hardcoded API keys or overly permissive access controls.

Quick Start

Run a security scan on the current project's .claude directory.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Claude Code configurations for security vulnerabilities?▼

Scanning Claude Code configurations for security vulnerabilities involves analyzing CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions to detect hardcoded secrets, prompt injection, and command injection risks.

What security risks are commonly found in CLAUDE.md and MCP server configs?▼

Common security risks in CLAUDE.md and MCP server configs include hardcoded API keys, overly permissive access controls, prompt injection, and command injection vulnerabilities introduced through unverified agent definitions or hooks.

Can I automatically fix hardcoded secrets and misconfigurations in Claude Code?▼

You can automatically fix hardcoded secrets and misconfigurations in Claude Code by running a security scan that provides severity grading and offers auto-fix options to remediate identified vulnerabilities.

Does the security scan check agent definitions and hooks for command injection?▼

The security scan checks agent definitions and hooks for command injection, analyzing these configuration files to identify potential exploit vectors and providing severity grading for the detected risks.

When should I run a security scan on my .claude directory?▼

You should run a security scan on your .claude directory before deploying a new agent or committing sensitive configuration changes to catch potential security flaws like hardcoded API keys or overly permissive access controls.

Related Skills

Explore More Software Engineering Skills→
ZESCODEZESCODE

security-scan

Scan Claude Code configuration files for secrets and misconfigurations.

Community
Advanced
DevelopersCoffeeDevelopersCoffee
3

cwe-798-hardcoded-credentials

Replace hardcoded credentials in Java code with environment variables or secret managers.

Official
Intermediate
SergeiGolosSergeiGolos
1

vulnerability-scanner

Detect and prioritize security vulnerabilities across dependencies, secrets, code patterns, and configurations.

Community
Advanced
devendrapratapsinghdevendrapratapsingh
1

platform-security

Audit container images, Kubernetes configurations, cloud environments, and infrastructure as code for security vulnerabilities.

Community
Advanced