skills.rest
samymity
samymityCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan Claude Code configuration files for security vulnerabilities and misconfigurations.

1|Updated Mar 3, 2026
Search Tags:#claude code#security scan#prompt injection#mcp servers#secrets detection#configuration hardening
One-click install
npx skills add https://github.com/samymity/bridge-ventures-backend --skill security-scan-samymity
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/samymity/bridge-ventures-backend/tree/main/.claude/skills/security-scan
Command: npx skills add https://github.com/samymity/bridge-ventures-backend --skill security-scan-samymity

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps you detect security vulnerabilities, misconfigurations, and prompt-injection risks inside your Claude Code configuration before they can be exploited.

Core Features & Use Cases

  • Configuration Security Auditing: Scans .claude/ files for hardcoded secrets, risky permissions, and injection patterns.
  • AgentShield-Based Risk Detection: Uses AgentShield to analyze CLAUDE.md, settings.json, MCP server definitions, hooks, and agent files for common high-impact problems.
  • CI and Remediation Support: Produces machine-friendly outputs (JSON/Markdown/HTML) and can apply safe auto-fixes where supported.

Use case: After adding MCP servers or updating hook scripts in a repository, run a scan to catch command injection vectors and overly permissive tool access before merging changes.

Quick Start

Run a scan of your repository’s Claude Code configuration by executing npx ecc-agentshield scan.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Claude Code configuration files for security vulnerabilities?▼

To scan Claude Code configuration files for security vulnerabilities, run AgentShield over your target path to audit `.claude/` directories and report findings across multiple severity levels for secure remediation workflows.

What security risks are present in Claude Code CLAUDE.md and settings.json files?▼

Security risks in CLAUDE.md and settings.json files include hardcoded secrets, risky permissions, and prompt injection patterns. Auditing these Claude Code configurations identifies misconfiguration risks before they can be exploited.

When should I run a security scan on my MCP server definitions and hooks?▼

Run a security scan on MCP server definitions and hooks during onboarding, after changes, or before commits and CI merges to catch command injection vectors and overly permissive tool access before merging repository updates.

Does AgentShield support automated remediation for Claude Code misconfigurations?▼

AgentShield supports automated remediation for Claude Code misconfigurations by producing machine-friendly JSON, Markdown, and HTML outputs, and can apply safe auto-fixes where supported to streamline secure configuration updates.

Can I integrate Claude Code configuration auditing into my CI pipeline?▼

You can integrate Claude Code configuration auditing into your CI pipeline by executing the scan command before CI merges to automatically detect command injection vectors and overly permissive tool access using machine-friendly outputs.

Related Skills

Explore More Software Engineering Skills→
Sake-TeamSake-Team

security-scan

Scan Claude Code configurations for vulnerabilities and misconfigurations.

Official
Advanced
jjmendezrodriguezjjmendezrodriguez

security-scan

Scan Claude Code configuration files for security vulnerabilities and misconfigurations.

Community
Intermediate
ZESCODEZESCODE

security-scan

Scan Claude Code configuration files for secrets and misconfigurations.

Community
Advanced
Michae2xlMichae2xl

security-scan

Scan Claude Code configurations for security vulnerabilities using AgentShield.

Community
Advanced