security-scan
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill acts as a documentation wrapper for the AgentShield security tool, intended to help users harden their Claude Code environment.\n- [COMMAND_EXECUTION]: The skill provides standard command-line instructions to install (
npm install -g ecc-agentshield) and run (npx ecc-agentshield scan) a security auditing tool. These commands are necessary for the skill's stated purpose.\n- [EXTERNAL_DOWNLOADS]: The skill correctly points to the official npm registry for the package and the official GitHub repository for source code transparency.\n- [SAFE]: Instructions for using the tool's AI-powered deep analysis feature use safe placeholders (e.g.,your-key) for API tokens, adhering to secret management best practices.
Audit Metadata