security-scan

Scan agent configurations for security vulnerabilities and misconfigurations.

12|4|Updated Mar 22, 2026

Search Tags:#vulnerability assessment #hooks #MCP #security scan #agent configuration

Ready to run

npx skills add https://github.com/TeiNam/kiro-with-harness --skill security-scan-teinam

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/TeiNam/kiro-with-harness/tree/main/skills/security-scan
Command: npx skills add https://github.com/TeiNam/kiro-with-harness --skill security-scan-teinam

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ecc-agentshield, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies security vulnerabilities and misconfigurations in agent configurations, reducing risks and improving system integrity.

Core Features & Use Cases

Security Auditing: Scans for security vulnerabilities, misconfigurations, and injection risks.
File Checking: Inspects CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
Use Case: Ensure your project's agents are secure by regularly scanning with this Skill. It can be integrated into your development workflow or CI pipeline.

Quick Start

Run a basic scan on the current project's .claude/ directory with 'npx ecc-agentshield scan'.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan agent configurations for security vulnerabilities?▼

To scan agent configurations for security vulnerabilities, run 'npx ecc-agentshield scan' to inspect your project's .claude/ directory. This checks settings.json, hooks, and MCP servers for misconfigurations and injection risks.

Can I use security scanning as a pre-commit hook in CI/CD?▼

Yes, security scanning can be integrated into pre-commit hooks or CI/CD pipelines. This allows you to automate vulnerability assessments for agent configurations before code changes are merged into the main branch.

What files does an agent configuration security audit inspect?▼

An agent configuration security audit inspects CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions. This identifies potential security issues and misconfigurations across your project's configuration files.

Do I need AgentShield to perform in-depth security checks?▼

Yes, AgentShield is required to perform in-depth security checks. This Skill depends on the ecc-agentshield package to execute comprehensive vulnerability assessments on your agent configurations and project settings.

What are common security misconfigurations found in MCP servers and hooks?▼

Common security misconfigurations in MCP servers and hooks include injection risks, overly permissive settings, and unverified agent definitions. This Skill identifies these vulnerabilities to improve overall system integrity.