Scan Claude Code configs for secrets permission drift and unsafe MCP hookups with AgentShield

Audit a Claude Code setup before use by flagging hardcoded secrets, broad allow rules, risky hooks, and dangerous MCP server config.

Prerequisites

Claude Code configuration directory, AgentShield CLI or npx path, local shell access, optional CI environment for GitHub Action usage

Installation

Install or set up from the source-backed instructions:

Run AgentShield with the no-install npx flow or install the documented package globally, then scan the target Claude Code configuration directory and review or apply the reported fixes.

• Source: https://github.com/affaan-m/agentshield

Documentation

• https://github.com/affaan-m/agentshield