skills.rest
adamreger
adamregerCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan Claude Code configuration files for security vulnerabilities and misconfigurations using AgentShield.

2|Updated Feb 25, 2026
Search Tags:#claude code#mcp#security scan#prompt injection#secrets detection#configuration audit#agentshield
One-click install
npx skills add https://github.com/adamreger/ecc-antigravity --skill security-scan-adamreger
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/adamreger/ecc-antigravity/tree/main/skills/security-scan
Command: npx skills add https://github.com/adamreger/ecc-antigravity --skill security-scan-adamreger

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ecc-agentshield.

What problem does it solve? Claude Code configurations like CLAUDE.md, settings.json, MCP servers, and hooks can contain hardcoded secrets, overly permissive permissions, and prompt injection risks that are easy to miss during manual review. ## Core Features & Use Cases - Configuration Auditing: Scans CLAUDE.md, settings.json, mcp.json, hooks, and agent definitions for secrets, dangerous permissions, and injection patterns. - Auto-Fix and Reporting: Applies safe automatic fixes and outputs reports in terminal, JSON, Markdown, or HTML formats with letter-grade severity scoring. - Use Case: Before committing changes to your .claude/ directory, run a scan to catch a hardcoded API key in mcp.json or a wildcard Bash permission in settings.json, then apply auto-fixes and integrate the GitHub Action into CI for continuous checks. ## Quick Start Ask the assistant to run a security scan on the current project's .claude configuration and report any critical or high severity findings.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my Claude Code configuration for security issues?▼

Run npx ecc-agentshield scan in your project directory to audit the .claude/ folder. It checks CLAUDE.md, settings.json, mcp.json, hooks, and agent files, then reports findings with severity grades from A to F.

What security risks does AgentShield detect in Claude Code configs?▼

AgentShield detects hardcoded API keys and tokens, wildcard Bash permissions, command injection in hooks via interpolation, risky MCP servers, auto-run instructions in CLAUDE.md, and missing deny lists in permission settings.

Can I integrate Claude Code security scanning into CI/CD?▼

Yes, use the affaan-m/agentshield GitHub Action with a path, minimum severity, and fail-on-findings options. You can also run npx ecc-agentshield scan --format json for machine-readable output in any pipeline.

Does the security scan automatically fix vulnerabilities?▼

Yes, running npx ecc-agentshield scan --fix applies safe automatic fixes such as replacing hardcoded secrets with environment variable references and tightening wildcard permissions. Suggestions marked manual-only are never modified.

Do I need to install AgentShield before scanning?▼

No installation is required since npx ecc-agentshield runs the tool directly. You can optionally install it globally with npm install -g ecc-agentshield for repeated use.

Related Skills

Explore More Software Engineering Skills→
vinwangvinwang

security-scan

Audit Claude Code configurations for security issues and misconfigurations.

Community
Advanced
trailofbitstrailofbits
6.5k

insecure-defaults

Detect insecure default configurations with hardcoded secrets and weak authentication.

Official
Intermediate
pjherronpjherron

security-scan

Scan Claude Code configuration files for security vulnerabilities and misconfigurations using AgentShield.

Community
Intermediate
OWASPOWASP
141

secrets-scan

Detect hardcoded secrets in source code and configuration files.

Official
Intermediate