Scans Claude Code configurations for vulnerabilities, misconfigurations, and injection risks.
npx skills add https://github.com/unju-ai/ecc --skill security-scan-unju-ai
Please help me install this Agent Skill. Skill: security-scan Source: https://github.com/unju-ai/ecc/tree/main/docs/ja-JP/skills/security-scan Command: npx skills add https://github.com/unju-ai/ecc --skill security-scan-unju-ai
This Skill identifies and helps remediate security vulnerabilities, misconfigurations, and injection risks within Claude Code project settings, ensuring a safer development environment.
CLAUDE.md, settings.json, MCP configurations, hooks, and agent definitions for security flaws.Run the security scan command to audit the current project's .claude directory.
High-intent search queries and answers about installing and using this skill.
Scanning Claude Code configurations for security vulnerabilities involves auditing `CLAUDE.md`, `settings.json`, MCP servers, hooks, and agent definitions. This skill uses AgentShield to identify misconfigurations and injection risks, providing detailed reports and optional automated fixes.
Finding hardcoded secrets in Claude Code settings requires auditing project configuration files like `CLAUDE.md` and `settings.json`. This skill detects hardcoded API keys and overly permissive access controls, offering automated remediation to prevent potential security breaches.
AgentShield works with MCP server configurations by analyzing their definitions within the Claude Code environment to detect security flaws. It targets these configurations alongside hooks and agent definitions to identify injection risks and misconfigurations, generating detailed security reports.
You can automatically fix security misconfigurations in your Claude Code project using the automated remediation features provided. After scanning `CLAUDE.md` and `settings.json`, the skill offers options to automatically resolve common issues like hardcoded secrets and access controls.
You should run a security scan on your Claude Code agent definitions before committing changes to a new project. This ensures the detection and remediation of security vulnerabilities, misconfigurations, and injection risks within your development environment.
samymityScan Claude Code configuration files for security vulnerabilities and misconfigurations.
sumeetonline90Scan Claude Code configuration directories for security vulnerabilities and misconfigurations.
Serg28Automate security audits with semgrep, trivy, gitleaks, and dependency scanners.
ZESCODEScan Claude Code configuration files for secrets and misconfigurations.