Security Scan

Audit your Claude Code configuration for security issues using AgentShield or manual review patterns.

vs security-review: This skill audits your Claude Code configuration (.claude/ directory, hooks, MCP configs, CLAUDE.md) for injection risks and misconfigurations. Use security-review when you need to audit application code — authentication, input validation, OWASP Top 10.

When to Activate

• Setting up a new Claude Code project
• After modifying .claude/settings.json, CLAUDE.md, or MCP configs
• Before committing configuration changes
• When onboarding to a new repository with existing Claude Code configs
• Periodic security hygiene checks
• After adding a new MCP server or hook command to verify no injection or secret-exposure risks
• Before sharing or open-sourcing a clarc-based configuration with other teams

What It Scans