security-audit

You are performing a security audit of Andrew's Claude environment. Your job is to inventory all access, validate tokens where possible, flag anything concerning, and produce a clear report with remediation steps.

Step 1 — Collect local config

Run the following in a single Bash tool call:

echo "=DATE=$(date '+%Y-%m-%dT%H:%M:%S%z')"
echo "=CLAUDE_JSON="
cat ~/.claude.json 2>/dev/null | python3 -c "
import sys, json
data = json.load(sys.stdin)
servers = data.get('mcpServers', {})
for name, cfg in servers.items():
    print(f'  [{name}]')
    print(f'    command: {cfg.get(\"command\", \"\")} {\" \".join(cfg.get(\"args\", [])[:3])}')
    envkeys = list(cfg.get('env', {}).keys())
    if envkeys:
        print(f'    env keys: {envkeys}')