Security Scan

This audits your .claude/ directory for security issues using AgentShield. It scans CLAUDE.md for hardcoded secrets and prompt injection patterns, checks settings.json for overly permissive allow lists, flags risky MCP server configs, and looks for command injection in hooks. You'd run it before committing config changes or when inheriting someone else's Claude Code setup. The --opus flag runs a three-agent red team/blue team analysis if you want deeper coverage. Outputs terminal, JSON, markdown, or HTML. The auto-fix mode handles safe remediations like replacing hardcoded secrets with env var references. Useful security hygiene tool if you're working with Claude Code configurations that touch sensitive repos or production systems.

skills.sh installs: 5.8K
GitHub stars: 300.3K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add affaan-m/ecc --skill security-scan --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Scan Skill

Audit your Claude Code configuration for security issues using AgentShield.

When to Activate

Setting up a new Claude Code project
After modifying .claude/settings.json, CLAUDE.md, or MCP configs
Before committing configuration changes
When onboarding to a new repository with existing Claude Code configs
Periodic security hygiene checks

What It Scans

File	Checks
`CLAUDE.md`	Hardcoded secrets, auto-run instructions, prompt injection patterns
`settings.json`	Overly permissive allow lists, missing deny lists, dangerous bypass flags
`mcp.json`	Risky MCP servers, hardcoded env secrets, npx supply chain risks
`hooks/`	Command injection via interpolation, data exfiltration, silent error suppression
`agents/*.md`	Unrestricted tool access, prompt injection surface, missing model specs

Prerequisites

AgentShield must be installed. Check and install if needed:

# Check if installed
npx ecc-agentshield --version

# Install globally (recommended)
npm install -g ecc-agentshield

SKILL.md on GitHub

Details

Repository: github.com/affaan-m/ecc
Categories: Frontend Development, Security, AI & Agent Building
First seen: Jul 14, 2026