skills.rest
voidrot
voidrotCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-scan

Scan Claude Code and agent configurations for security vulnerabilities.

Updated Jul 7, 2026
Search Tags:#Claude Code#risk assessment#security scanning#agent configuration#security compliance
One-click install
npx skills add https://github.com/voidrot/agents --skill security-scan-voidrot
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/voidrot/agents/tree/main/skills/security/security-scan
Command: npx skills add https://github.com/voidrot/agents --skill security-scan-voidrot

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ecc-agentshield, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the need for automating the security inspection of Claude Code and agent configurations, thereby reducing the risk of vulnerabilities and ensuring code integrity.

Core Features & Use Cases

  • Security Scanning: Automated scanning for prompt-injection, permission, MCP, hook, secret, and config risks.
  • Configuration Auditing: Inspects Claude settings, MCP config, hooks, agent definitions, and project instruction files.
  • Use Case: Integrate this Skill into your workflow to continuously monitor and harden Claude Code and agent configurations, ensuring compliance with security best practices.

Quick Start

Run the security-scan skill to inspect the Claude Code configuration for potential security issues.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security scanning of Claude Code agent configurations?▼

You can automate security scanning of Claude Code agent configurations by running this Skill to inspect settings, MCP config, hooks, and agent definitions for hardcoded secrets and excessive permissions.

What security vulnerabilities are checked during a Claude Code configuration audit?▼

A configuration audit checks for prompt-injection risks, excessive permission grants, MCP vulnerabilities, hook risks, hardcoded secrets, and general configuration security issues within Claude Code.

Can I integrate automated security scanning into my CI/CD pipeline for agent configurations?▼

Yes, you can integrate this security scanning Skill into your CI/CD pipelines to continuously monitor and harden Claude Code and agent configurations, ensuring compliance with security best practices.

Do I need AgentShield to run security scans on Claude Code settings?▼

Yes, this Skill requires the AgentShield dependency to automate the security auditing and scanning processes for your Claude Code and agent configurations.

What is the best way to check for hardcoded secrets in Claude Code project instruction files?▼

The best way to check for hardcoded secrets is to run an automated configuration audit that inspects Claude settings, MCP config, hooks, and project instruction files for security vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
vinitgirdharvinitgirdhar

security-scan

Audit Claude Code configuration files for security risks with AgentShield.

Community
Intermediate
kouisokouiso

security-scan

Scan Claude Code configurations for security vulnerabilities and misconfigurations.

Community
Advanced
jeremylongshorejeremylongshore
2.6k

building-cicd-pipelines

Generate CI/CD pipeline configurations for GitHub Actions, GitLab CI, and Jenkins.

Community
Intermediate
cosmixcosmix
53

security-audit

Identify vulnerabilities, misconfigurations, and security best-practice violations across code, configurations, and infrastructure.

Community
Advanced