security-scan
Audits Claude Code configurations for security risks like secrets and prompt injection with auto-fix and CI/CD support.
Install
npx skills add https://github.com/affaan-m/everything-claude-code --skill security-scanStats
| Total installs | 1,535 |
| Weekly installs | 1.5K |
| GitHub stars | 112.5K |
| First seen | Feb 11, 2026 |
| Source | @affaan-m/everything-claude-code |
Summary
- Scans five configuration areas: CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions for hardcoded secrets, prompt injection patterns, overly permissive permissions, and command injection risks
- Provides four output formats (terminal, JSON, Markdown, HTML) and integrates with CI/CD via GitHub Action with configurable severity filtering
- Includes auto-fix mode for safe remediations like replacing hardcoded secrets with environment variables, plus optional Opus 4.6 deep analysis using a three-agent red-team/blue-team pipeline
- Requires AgentShield installation via npm; can run directly with npx without setup
Tags
Related skills
| Skill | Installs | vs security-scan |
|---|---|---|
| fastapi-expert | 1,625 | +90 |
| docker-patterns | 1,801 | +266 |
| spec-to-code-compliance | 1,325 | -210 |
| setup-api-key | 1,421 | -114 |
| audit-context-building | 1,400 | -135 |
FAQ
- How many installs does security-scan have?
- security-scan has 1,535 total installs and 1.5K installs this week.
- Where is security-scan hosted?
- security-scan is published by @affaan-m/everything-claude-code at https://github.com/affaan-m/everything-claude-code.
- How many GitHub stars does security-scan have?
- security-scan has 112.5K GitHub stars.
- When was security-scan first indexed?
- OrangeBot.AI first indexed security-scan on Feb 11, 2026.
- How do I install security-scan?
- Run: npx skills add https://github.com/affaan-m/everything-claude-code --skill security-scan