Scan Claude Code configs for secrets permission drift and unsafe MCP hookups with AgentShield
Audit a Claude Code setup before use by flagging hardcoded secrets, broad allow rules, risky hooks, and dangerous MCP server config.
Prerequisites
Claude Code configuration directory, AgentShield CLI or npx path, local shell access, optional CI environment for GitHub Action usage
Installation
Install or set up from the source-backed instructions:
Run AgentShield with the no-install npx flow or install the documented package globally, then scan the target Claude Code configuration directory and review or apply the reported fixes.