skills.rest
woxiangyangzhimao
woxiangyangzhimaoCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan Claude Code configurations for secrets and injection risks.

3|2|Updated Apr 12, 2026
Search Tags:#vulnerability assessment#Claude Code#security scanning#risk mitigation#configuration audit
One-click install
npx skills add https://github.com/woxiangyangzhimao/skills --skill security-scan-woxiangyangzhimao
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/woxiangyangzhimao/skills/tree/main/security-scan
Command: npx skills add https://github.com/woxiangyangzhimao/skills --skill security-scan-woxiangyangzhimao

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ecc-agentshield, and includes scripts (resource) components.

What problem does it solve?

This Skill identifies security vulnerabilities, misconfigurations, and injection risks in Claude Code configurations, ensuring a secure environment.

Core Features & Use Cases

  • Security Audit: Scan .claude/ directory for hardcoded secrets, auto-run instructions, and prompt injection patterns.
  • Risk Assessment: Evaluate permissions, MCP servers, hooks, and agent definitions for potential security issues.
  • Fix Recommendations: Apply safe fixes automatically for auto-fixable issues.
  • Deep Analysis: Run adversarial three-agent pipeline for deeper security analysis.
  • Secure Config Scaffold: Initialize a new secure .claude/ configuration from scratch.
  • CI Integration: Add to your CI pipeline for continuous security checks.
  • Severity Levels: Provides detailed severity levels for findings.
  • Interpreting Results: Offers guidance on interpreting and addressing findings.

Quick Start

Run the security scan on your Claude Code configuration using the command: npx ecc-agentshield scan.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my Claude Code configuration for security vulnerabilities?▼

Scan Claude Code configurations for security vulnerabilities by running `npx ecc-agentshield scan`, which checks the `.claude/` directory for hardcoded secrets, auto-run instructions, and injection patterns.

What is prompt injection risk detection in MCP servers and hooks?▼

Prompt injection risk detection in MCP servers and hooks identifies malicious instructions embedded in agent definitions, evaluating permissions and configurations to mitigate potential injection risks.

Can I run automated security scanning for Claude Code in a CI pipeline?▼

You can integrate automated security scanning into a CI pipeline for continuous Claude Code checks, receiving severity levels and fix recommendations for detected findings.

Do I need AgentShield installed to audit my Claude Code settings?▼

You need AgentShield installed to audit Claude Code settings, as the security scanning Skill requires the `ecc-agentshield` dependency to execute automated checks and risk assessments.

How do I fix hardcoded secrets found in my Claude Code configuration audit?▼

Fix hardcoded secrets found in your configuration audit by applying automatically generated safe fixes, using provided severity levels and recommendations to address identified vulnerabilities.

What is the best way to initialize a secure Claude Code configuration from scratch?▼

Initialize a secure Claude Code configuration from scratch using the secure config scaffold feature, which generates a new pre-secured `.claude/` directory to prevent initial misconfigurations.

Related Skills

Explore More Software Engineering Skills→
aayushsoamaayushsoam
1

security-scan

Scan Claude Code configurations for security vulnerabilities and generate severity-graded risk reports.

Community
Intermediate
jeremylongshorejeremylongshore
2.6k

scanning-container-security

Scan container images and running containers for vulnerabilities using Trivy or Snyk.

Community
Intermediate
vrcmsvrcms
1

security-scan

Scan AI development configuration files for security vulnerabilities and misconfigurations.

Community
Advanced
EojEdredEojEdred

security-hardening

Scan code and configurations for security vulnerabilities and replay risks.

Community
Intermediate