Esta página se muestra en inglés. Una traducción al español está en curso.
CLI ToolsMay 13, 2026·2 min de lectura

AgentShield — Security Audit for Claude Code

Security auditor for Claude Code configs. Scans `.claude/` for secrets, risky permissions, hook injection, and MCP misconfigs; outputs CI-ready reports.

Script Depot
Script Depot · Community
Introducción

AgentShield is a security auditor for Claude Code setups that scans your agent configuration directory and flags secrets, permission misconfigs, hook injection, and risky MCP patterns.

Best for: Hardening .claude/ configs before sharing them across a team

Works with: macOS/Linux/Windows; runs via npx or npm; targets Claude Code config layouts (README)

Setup time: 5–15 minutes

Key facts (verified)

  • Quick start uses npx ecc-agentshield scan (README).
  • README lists rule buckets like Secrets Detection, Hook Analysis, and MCP Server Security with per-bucket rule counts.
  • GitHub: 626 stars · 134 forks; pushed 2026-05-13 (GitHub API verified).

Main

A practical team workflow:

  1. Run AgentShield on your shared .claude/ template repo and check in a baseline JSON report.
  2. Use CI to fail only on medium/high findings at first, then tighten thresholds once false positives are understood.
  3. Treat MCP server configs as production dependencies: pin versions, document env vars, and review diffs.

README excerpt (verbatim)

AgentShield

AgentShield

Security auditor for AI agent configurations

Scans Claude Code setups for hardcoded secrets, permission misconfigs,
hook injection, MCP server risks, and agent prompt injection vectors.
Available as CLI, GitHub Action, and GitHub App integration.

npm version npm downloads tests coverage License: MIT

Quick Start · What It Catches · API Reference · Opus Pipeline · GitHub Action · Distribution · MiniClaw · Changelog

Why

The AI agent ecosystem is growing faster than its security tooling. In January 2026 alone:

  • 12% of a major agent skill marketplace was malicious (341 of 2,857 community skills)
  • A CVSS 8.8 CVE exposed 17,500+ internet-facing instances to one-click RCE
  • The Moltbook breach compromised 1.5M API tokens across 770,000 agents

Developers install community skills, connect MCP servers, and configure hooks without any automated way to audit the security of their setup. AgentShield scans your .claude/ directory and flags vulnerabilities before they become exploits.

Built at the Claude Code Hackathon (Cerebral Valley x Anthropic, Feb 2026). Part of the Everything Claude Code ecosystem (42K+ stars).

🙏

Fuente y agradecimientos

Source: https://github.com/affaan-m/agentshield > License: MIT > GitHub stars: 626 · forks: 134

Discusión

Inicia sesión para unirte a la discusión.
Aún no hay comentarios. Sé el primero en compartir tus ideas.

Activos relacionados

pbi-cli — Power BI Skills for Claude Code

pbi-cli is a Python CLI that installs Claude Code skills for Power BI models and PBIR reports. Get started with pipx + `skills install`.

CLI Tools
Script Depot

agent-audit — Security Linter for LLM Agents

Run a static security scanner for LLM agents: 53 OWASP Agentic Top 10 rules, prompt-injection checks, and MCP config auditing via agent-audit scan.

CLI Tools
Agent Toolkit

claude-tap — Trace Claude/Cursor CLI API Calls

claude-tap captures API traffic from Claude Code, Codex CLI, Cursor CLI, etc., and renders prompts and tool calls in a trace viewer. Verified 321★.

CLI Tools
Script Depot

LLxprt Code — Multi-Provider AI Coding CLI

LLxprt Code is an open-source AI coding CLI that switches across providers (Anthropic, Gemini, Codex, local). Install via brew or npm.

CLI Tools
Script Depot
◈Inicio🔍Buscar👤Yo