[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6G2NRWMMGXFV1PQMGTNZEC2":3,"skill-same:01M6G2NRWMMGXFV1PQMGTNZEC2":67},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":38,"linkOnly":39,"markdownContent":40,"markdownBody":41,"frontMatter":42,"refName":44,"commitSha":45,"skillDirectory":46,"forksCount":47,"repositoryHtmlUrl":48,"repositoryHomepageUrl":6,"ownerHtmlUrl":49,"ownerBlogUrl":50,"ownerDescription":51,"updatedAt":52,"install":53,"resources":66},"01M6G2NRWMMGXFV1PQMGTNZEC2","security-scan",null,"Scan your Claude Code configuration (.claude\u002F directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.","oabdelmaksoud\u002FAgention","oabdelmaksoud","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F50699149?v=4","01M6D5CVVN778ZCDP1WHS816SP","Omar Abdelmaksoud","01M6D8A4TE76V3DCSH3D94VG1V",2,"MIT","https:\u002F\u002Fgithub.com\u002Foabdelmaksoud\u002FAgention\u002Fblob\u002Fmain\u002Fupstream-sync\u002Fwork\u002Fecc\u002Fskills\u002Fsecurity-scan\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37],"security","security scan","scan","MCP","directory","vulnerabilities","code","mcp servers","injection","json","settings","hooks","settings.json","configuration","2026-11-10 10:12:30",false,"---\nname: security-scan\ndescription: Scan your Claude Code configuration (.claude\u002F directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.\norigin: ECC\n---\n\n# Security Scan Skill\n\nAudit your Claude Code configuration for security issues using [AgentShield](https:\u002F\u002Fgithub.com\u002Faffaan-m\u002Fagentshield).\n\n## When to Activate\n\n- Setting up a new Claude Code project\n- After modifying `.claude\u002Fsettings.json`, `CLAUDE.md`, or MCP configs\n- Before committing configuration changes\n- When onboarding to a new repository with existing Claude Code configs\n- Periodic security hygiene checks\n\n## What It Scans\n\n| File | Checks |\n|------|--------|\n| `CLAUDE.md` | Hardcoded secrets, auto-run instructions, prompt injection patterns |\n| `settings.json` | Overly permissive allow lists, missing deny lists, dangerous bypass flags |\n| `mcp.json` | Risky MCP servers, hardcoded env secrets, npx supply chain risks |\n| `hooks\u002F` | Command injection via interpolation, data exfiltration, silent error suppression |\n| `agents\u002F*.md` | Unrestricted tool access, prompt injection surface, missing model specs |\n\n## Prerequisites\n\nAgentShield must be installed. Check and install if needed:\n\n```bash\n# Check if installed\nnpx ecc-agentshield --version\n\n# Install globally (recommended)\nnpm install -g ecc-agentshield\n\n# Or run directly via npx (no install needed)\nnpx ecc-agentshield scan .\n```\n\n## Usage\n\n### Basic Scan\n\nRun against the current project's `.claude\u002F` directory:\n\n```bash\n# Scan current project\nnpx ecc-agentshield scan\n\n# Scan a specific path\nnpx ecc-agentshield scan --path \u002Fpath\u002Fto\u002F.claude\n\n# Scan with minimum severity filter\nnpx ecc-agentshield scan --min-severity medium\n```\n\n### Output Formats\n\n```bash\n# Terminal output (default) — colored report with grade\nnpx ecc-agentshield scan\n\n# JSON — for CI\u002FCD integration\nnpx ecc-agentshield scan --format json\n\n# Markdown — for documentation\nnpx ecc-agentshield scan --format markdown\n\n# HTML — self-contained dark-theme report\nnpx ecc-agentshield scan --format html > security-report.html\n```\n\n### Auto-Fix\n\nApply safe fixes automatically (only fixes marked as auto-fixable):\n\n```bash\nnpx ecc-agentshield scan --fix\n```\n\nThis will:\n- Replace hardcoded secrets with environment variable references\n- Tighten wildcard permissions to scoped alternatives\n- Never modify manual-only suggestions\n\n### Opus 4.6 Deep Analysis\n\nRun the adversarial three-agent pipeline for deeper analysis:\n\n```bash\n# Requires ANTHROPIC_API_KEY\nexport ANTHROPIC_API_KEY=your-key\nnpx ecc-agentshield scan --opus --stream\n```\n\nThis runs:\n1. **Attacker (Red Team)** — finds attack vectors\n2. **Defender (Blue Team)** — recommends hardening\n3. **Auditor (Final Verdict)** — synthesizes both perspectives\n\n### Initialize Secure Config\n\nScaffold a new secure `.claude\u002F` configuration from scratch:\n\n```bash\nnpx ecc-agentshield init\n```\n\nCreates:\n- `settings.json` with scoped permissions and deny list\n- `CLAUDE.md` with security best practices\n- `mcp.json` placeholder\n\n### GitHub Action\n\nAdd to your CI pipeline:\n\n```yaml\n- uses: affaan-m\u002Fagentshield@v1\n  with:\n    path: '.'\n    min-severity: 'medium'\n    fail-on-findings: true\n```\n\n## Severity Levels\n\n| Grade | Score | Meaning |\n|-------|-------|---------|\n| A | 90-100 | Secure configuration |\n| B | 75-89 | Minor issues |\n| C | 60-74 | Needs attention |\n| D | 40-59 | Significant risks |\n| F | 0-39 | Critical vulnerabilities |\n\n## Interpreting Results\n\n### Critical Findings (fix immediately)\n- Hardcoded API keys or tokens in config files\n- `Bash(*)` in the allow list (unrestricted shell access)\n- Command injection in hooks via `${file}` interpolation\n- Shell-running MCP servers\n\n### High Findings (fix before production)\n- Auto-run instructions in CLAUDE.md (prompt injection vector)\n- Missing deny lists in permissions\n- Agents with unnecessary Bash access\n\n### Medium Findings (recommended)\n- Silent error suppression in hooks (`2>\u002Fdev\u002Fnull`, `|| true`)\n- Missing PreToolUse security hooks\n- `npx -y` auto-install in MCP server configs\n\n### Info Findings (awareness)\n- Missing descriptions on MCP servers\n- Prohibitive instructions correctly flagged as good practice\n\n## Links\n\n- **GitHub**: [github.com\u002Faffaan-m\u002Fagentshield](https:\u002F\u002Fgithub.com\u002Faffaan-m\u002Fagentshield)\n- **npm**: [npmjs.com\u002Fpackage\u002Fecc-agentshield](https:\u002F\u002Fwww.npmjs.com\u002Fpackage\u002Fecc-agentshield)\n","# Security Scan Skill\n\nAudit your Claude Code configuration for security issues using [AgentShield](https:\u002F\u002Fgithub.com\u002Faffaan-m\u002Fagentshield).\n\n## When to Activate\n\n- Setting up a new Claude Code project\n- After modifying `.claude\u002Fsettings.json`, `CLAUDE.md`, or MCP configs\n- Before committing configuration changes\n- When onboarding to a new repository with existing Claude Code configs\n- Periodic security hygiene checks\n\n## What It Scans\n\n| File | Checks |\n|------|--------|\n| `CLAUDE.md` | Hardcoded secrets, auto-run instructions, prompt injection patterns |\n| `settings.json` | Overly permissive allow lists, missing deny lists, dangerous bypass flags |\n| `mcp.json` | Risky MCP servers, hardcoded env secrets, npx supply chain risks |\n| `hooks\u002F` | Command injection via interpolation, data exfiltration, silent error suppression |\n| `agents\u002F*.md` | Unrestricted tool access, prompt injection surface, missing model specs |\n\n## Prerequisites\n\nAgentShield must be installed. Check and install if needed:\n\n```bash\n# Check if installed\nnpx ecc-agentshield --version\n\n# Install globally (recommended)\nnpm install -g ecc-agentshield\n\n# Or run directly via npx (no install needed)\nnpx ecc-agentshield scan .\n```\n\n## Usage\n\n### Basic Scan\n\nRun against the current project's `.claude\u002F` directory:\n\n```bash\n# Scan current project\nnpx ecc-agentshield scan\n\n# Scan a specific path\nnpx ecc-agentshield scan --path \u002Fpath\u002Fto\u002F.claude\n\n# Scan with minimum severity filter\nnpx ecc-agentshield scan --min-severity medium\n```\n\n### Output Formats\n\n```bash\n# Terminal output (default) — colored report with grade\nnpx ecc-agentshield scan\n\n# JSON — for CI\u002FCD integration\nnpx ecc-agentshield scan --format json\n\n# Markdown — for documentation\nnpx ecc-agentshield scan --format markdown\n\n# HTML — self-contained dark-theme report\nnpx ecc-agentshield scan --format html > security-report.html\n```\n\n### Auto-Fix\n\nApply safe fixes automatically (only fixes marked as auto-fixable):\n\n```bash\nnpx ecc-agentshield scan --fix\n```\n\nThis will:\n- Replace hardcoded secrets with environment variable references\n- Tighten wildcard permissions to scoped alternatives\n- Never modify manual-only suggestions\n\n### Opus 4.6 Deep Analysis\n\nRun the adversarial three-agent pipeline for deeper analysis:\n\n```bash\n# Requires ANTHROPIC_API_KEY\nexport ANTHROPIC_API_KEY=your-key\nnpx ecc-agentshield scan --opus --stream\n```\n\nThis runs:\n1. **Attacker (Red Team)** — finds attack vectors\n2. **Defender (Blue Team)** — recommends hardening\n3. **Auditor (Final Verdict)** — synthesizes both perspectives\n\n### Initialize Secure Config\n\nScaffold a new secure `.claude\u002F` configuration from scratch:\n\n```bash\nnpx ecc-agentshield init\n```\n\nCreates:\n- `settings.json` with scoped permissions and deny list\n- `CLAUDE.md` with security best practices\n- `mcp.json` placeholder\n\n### GitHub Action\n\nAdd to your CI pipeline:\n\n```yaml\n- uses: affaan-m\u002Fagentshield@v1\n  with:\n    path: '.'\n    min-severity: 'medium'\n    fail-on-findings: true\n```\n\n## Severity Levels\n\n| Grade | Score | Meaning |\n|-------|-------|---------|\n| A | 90-100 | Secure configuration |\n| B | 75-89 | Minor issues |\n| C | 60-74 | Needs attention |\n| D | 40-59 | Significant risks |\n| F | 0-39 | Critical vulnerabilities |\n\n## Interpreting Results\n\n### Critical Findings (fix immediately)\n- Hardcoded API keys or tokens in config files\n- `Bash(*)` in the allow list (unrestricted shell access)\n- Command injection in hooks via `${file}` interpolation\n- Shell-running MCP servers\n\n### High Findings (fix before production)\n- Auto-run instructions in CLAUDE.md (prompt injection vector)\n- Missing deny lists in permissions\n- Agents with unnecessary Bash access\n\n### Medium Findings (recommended)\n- Silent error suppression in hooks (`2>\u002Fdev\u002Fnull`, `|| true`)\n- Missing PreToolUse security hooks\n- `npx -y` auto-install in MCP server configs\n\n### Info Findings (awareness)\n- Missing descriptions on MCP servers\n- Prohibitive instructions correctly flagged as good practice\n\n## Links\n\n- **GitHub**: [github.com\u002Faffaan-m\u002Fagentshield](https:\u002F\u002Fgithub.com\u002Faffaan-m\u002Fagentshield)\n- **npm**: [npmjs.com\u002Fpackage\u002Fecc-agentshield](https:\u002F\u002Fwww.npmjs.com\u002Fpackage\u002Fecc-agentshield)\n",{"name":5,"origin":43,"description":7},"ECC","main","a318f48de3c5718e8ea2e9f6fae7790e8a759e85","upstream-sync\u002Fwork\u002Fecc\u002Fskills\u002Fsecurity-scan",0,"https:\u002F\u002Fgithub.com\u002Foabdelmaksoud\u002FAgention","https:\u002F\u002Fgithub.com\u002Foabdelmaksoud","https:\u002F\u002Fwww.linkedin.com\u002Fin\u002Fo-abdelmaksoud\u002F","Full-Stack Engineer | AI Systems Architect | Building autonomous multi-agent systems","2026-03-08 21:23:03",{"source":8,"skillName":5,"commands":54,"prompt":64,"zipAvailable":65},[55,58,61],{"tool":56,"command":57},"npx","npx skills add oabdelmaksoud\u002FAgention --skill security-scan",{"tool":59,"command":60},"bunx","bunx skills add oabdelmaksoud\u002FAgention --skill security-scan",{"tool":62,"command":63},"pnpm","pnpm dlx skills add oabdelmaksoud\u002FAgention --skill security-scan","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Foabdelmaksoud\u002FAgention\u002Fblob\u002Fmain\u002Fupstream-sync\u002Fwork\u002Fecc\u002Fskills\u002Fsecurity-scan\u002FSKILL.md",true,[],[68,90,103,134,160,179],{"skillNo":69,"name":70,"nameZh":6,"description":71,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":72,"categories":73,"keywords":77,"publishedAt":38},"01M6G2QFCBNBYAJF2KTK85G9A6","visa-doc-translate","Translate visa application documents (images) to English and create a bilingual PDF with original and translation","https:\u002F\u002Fgithub.com\u002Foabdelmaksoud\u002FAgention\u002Fblob\u002Fmain\u002Fupstream-sync\u002Fwork\u002Fecc\u002Fskills\u002Fvisa-doc-translate\u002FSKILL.md",[74],{"categoryNo":75,"categoryName":76,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000002","文档处理",[78,79,80,81,82,83,84,85,86,87,88,89],"translate","doc","visa doc translate","bilingual","with","english","application","PDF","translation","documents","create","images",{"skillNo":91,"name":92,"nameZh":6,"description":93,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":94,"categories":95,"keywords":96,"publishedAt":38},"01M6G2QB09TSK6BY4ME5X20EVQ","verification-loop","A comprehensive verification system for Claude Code sessions.","https:\u002F\u002Fgithub.com\u002Foabdelmaksoud\u002FAgention\u002Fblob\u002Fmain\u002Fupstream-sync\u002Fwork\u002Fecc\u002Fskills\u002Fverification-loop\u002FSKILL.md",[],[97,98,99,100,30,101,102],"verification","loop","verification loop","sessions","claude code sessions","system",{"skillNo":104,"name":105,"nameZh":6,"description":106,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":107,"categories":108,"keywords":118,"publishedAt":38},"01M6G2Q6V2F7G03VAAF27FXPJR","tdd-workflow","Use this skill when writing new features, fixing bugs, or refactoring code. Enforces test-driven development with 80%+ coverage including unit, integration, and E2E tests.","https:\u002F\u002Fgithub.com\u002Foabdelmaksoud\u002FAgention\u002Fblob\u002Fmain\u002Fupstream-sync\u002Fwork\u002Fecc\u002Fskills\u002Ftdd-workflow\u002FSKILL.md",[109,112,113],{"categoryNo":110,"categoryName":111,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":114,"categoryName":115,"taxonomyType":116,"taxonomyTypeDesc":117},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[119,120,121,122,123,124,125,126,127,30,128,129,130,131,82,132,133],"workflow","tdd","tdd workflow","use","unit","coverage","refactoring","e2e","integration","development","e2e tests","tests","driven","test","writing",{"skillNo":135,"name":136,"nameZh":6,"description":137,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":138,"categories":139,"keywords":140,"publishedAt":38},"01M6G2Q359YJRWAR2PFCEQAXF3","swiftui-patterns","SwiftUI architecture patterns, state management with @Observable, view composition, navigation, performance optimization, and modern iOS\u002FmacOS UI best practices.","https:\u002F\u002Fgithub.com\u002Foabdelmaksoud\u002FAgention\u002Fblob\u002Fmain\u002Fupstream-sync\u002Fwork\u002Fecc\u002Fskills\u002Fswiftui-patterns\u002FSKILL.md",[],[141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,82],"patterns","swiftui","swiftui patterns","architecture","macos","performance","state management","best practices","state","ui","Optimization","ios","architecture patterns","Composition","performance optimization","view","management","swiftui architecture","navigation",{"skillNo":161,"name":162,"nameZh":6,"description":163,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":164,"categories":165,"keywords":167,"publishedAt":38},"01M6G2PY8B2FWZTWPZ84H83Y7C","swift-protocol-di-testing","Protocol-based dependency injection for testable Swift code — mock file system, network, and external APIs using focused protocols and Swift Testing.","https:\u002F\u002Fgithub.com\u002Foabdelmaksoud\u002FAgention\u002Fblob\u002Fmain\u002Fupstream-sync\u002Fwork\u002Fecc\u002Fskills\u002Fswift-protocol-di-testing\u002FSKILL.md",[166],{"categoryNo":110,"categoryName":111,"taxonomyType":21,"taxonomyTypeDesc":22},[168,169,170,171,30,172,173,174,32,102,175,176,177,178],"swift protocol di testing","protocol","swift","testing","protocols","file","network","dependency","swift testing","dependency injection","mock",{"skillNo":180,"name":181,"nameZh":6,"description":182,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":183,"categories":184,"keywords":185,"publishedAt":38},"01M6G2PSCN2GXV9FFZDRRRWVB6","swift-concurrency-6-2","Swift 6.2 Approachable Concurrency — single-threaded by default, @concurrent for explicit background offloading, isolated conformances for main actor types.","https:\u002F\u002Fgithub.com\u002Foabdelmaksoud\u002FAgention\u002Fblob\u002Fmain\u002Fupstream-sync\u002Fwork\u002Fecc\u002Fskills\u002Fswift-concurrency-6-2\u002FSKILL.md",[],[186,187,188,170,189,44,190],"concurrency","swift concurrency","swift concurrency 6 2","default","types"]