skills.rest
TeiNam
TeiNamCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-scan

Scan agent configurations for security vulnerabilities and misconfigurations.

12|4|Updated Mar 22, 2026
Search Tags:#vulnerability assessment#hooks#MCP#security scan#agent configuration
One-click install
npx skills add https://github.com/TeiNam/kiro-with-harness --skill security-scan-teinam
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/TeiNam/kiro-with-harness/tree/main/skills/security-scan
Command: npx skills add https://github.com/TeiNam/kiro-with-harness --skill security-scan-teinam

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ecc-agentshield, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies security vulnerabilities and misconfigurations in agent configurations, reducing risks and improving system integrity.

Core Features & Use Cases

  • Security Auditing: Scans for security vulnerabilities, misconfigurations, and injection risks.
  • File Checking: Inspects CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
  • Use Case: Ensure your project's agents are secure by regularly scanning with this Skill. It can be integrated into your development workflow or CI pipeline.

Quick Start

Run a basic scan on the current project's .claude/ directory with 'npx ecc-agentshield scan'.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan agent configurations for security vulnerabilities?▼

To scan agent configurations for security vulnerabilities, run 'npx ecc-agentshield scan' to inspect your project's .claude/ directory. This checks settings.json, hooks, and MCP servers for misconfigurations and injection risks.

Can I use security scanning as a pre-commit hook in CI/CD?▼

Yes, security scanning can be integrated into pre-commit hooks or CI/CD pipelines. This allows you to automate vulnerability assessments for agent configurations before code changes are merged into the main branch.

What files does an agent configuration security audit inspect?▼

An agent configuration security audit inspects CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions. This identifies potential security issues and misconfigurations across your project's configuration files.

Do I need AgentShield to perform in-depth security checks?▼

Yes, AgentShield is required to perform in-depth security checks. This Skill depends on the ecc-agentshield package to execute comprehensive vulnerability assessments on your agent configurations and project settings.

What are common security misconfigurations found in MCP servers and hooks?▼

Common security misconfigurations in MCP servers and hooks include injection risks, overly permissive settings, and unverified agent definitions. This Skill identifies these vulnerabilities to improve overall system integrity.

Related Skills

Explore More Software Engineering Skills→
drxaibidrxaibi

security-scan

Scan Claude Code configurations for security vulnerabilities and misconfigurations.

Community
Advanced
josavicentevwjosavicentevw
1

devsecops

Automate security scanning and governance across CI/CD pipelines and compliance workflows.

Community
Advanced
kk20300113-pngkk20300113-png

security-scan

Scan Claude Code configuration files for security vulnerabilities and misconfigurations.

Community
Intermediate
DevHive1DevHive1
18

security_scan

Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.

Community
Advanced