skills.rest
vinitgirdhar
vinitgirdharCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-scan

Audit Claude Code configuration files for security risks with AgentShield.

1|Updated Mar 8, 2026
Search Tags:#security#configuration#risk-assessment#claude-code#scanning#agentshield
One-click install
npx skills add https://github.com/vinitgirdhar/GRID_ --skill security-scan-vinitgirdhar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/vinitgirdhar/GRID_/tree/main/.agent/skills/security-scan
Command: npx skills add https://github.com/vinitgirdhar/GRID_ --skill security-scan-vinitgirdhar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Claude Code configurations can expose sensitive data or misconfigurations that attackers may exploit; this skill audits and flags such issues using AgentShield.

Core Features & Use Cases

  • Scans CLAUDE.md, settings.json, MCP configurations, hooks, and agent definitions for security issues
  • Generates actionable findings with severity levels and guidance
  • Use Case: When onboarding a new Claude Code project, after config changes, or during periodic security hygiene checks

Quick Start

Scan the current project’s Claude Code configuration with AgentShield to identify risks and generate a prioritized remediation plan.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Claude Code configurations for security risks?▼

To audit Claude Code configurations for security risks, use AgentShield to scan the .claude directory, including CLAUDE.md, settings.json, MCP configurations, hooks, and agent definitions, generating actionable findings graded by severity with remediation guidance.

What security issues can be found in MCP configurations and hooks?▼

Security issues in MCP configurations and hooks include sensitive data exposure and misconfigurations that attackers may exploit. AgentShield identifies these vulnerabilities by auditing settings to flag risks and generate a prioritized remediation plan.

When should I run a security scan on my Claude Code project?▼

You should run a security scan when onboarding a new Claude Code project, immediately after making configuration changes, or during periodic security hygiene checks across repositories to ensure no sensitive data is exposed.

Does AgentShield require any dependencies to scan settings.json files?▼

AgentShield does not require external dependencies to scan settings.json files. It operates directly on the .claude directory contents to evaluate configurations and output graded severity findings with actionable remediation steps.

What's the best way to remediate flagged security risks in agent definitions?▼

The best way to remediate flagged security risks in agent definitions is to follow the actionable guidance provided by the scan output, which prioritizes issues by severity level to help you systematically resolve configuration vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
EwallywEwallyw

security-scan

Scan Claude Code configurations for vulnerabilities, misconfigurations, and injection risks.

Community
Advanced
jedmamostojedmamosto

security-scan

Scans Claude settings and skills for hardcoded secrets and unsafe permissions.

Community
Basic
nahisahonahisaho
12

security-auditor

Audit code, configurations, and dependencies for security vulnerabilities.

Community
Advanced
Manvendra08Manvendra08
1

security-scan

Scan Claude Code configuration files for security vulnerabilities and misconfigurations.

Community
Intermediate