claude-guard
Scans Claude Code setup files for risky skills, hooks, MCP servers, and secrets.
Scans Claude Code setup files for risky skills, hooks, MCP servers, and secrets.
claude-guard scans Claude Code skills, hooks, MCP configurations, and settings for prompt-injection lures, download-and-execute commands, plaintext endpoints, broad permissions, hidden bidirectional characters, and committed secrets. It redacts secret values, groups findings by severity, and exits with a failure code when a High finding exists, making JSON output suitable for CI. The zero-dependency scanner is offline and heuristic; a clean result is not a sandbox or formal proof of safety.
Resource types
Use cases
Platforms
Runtime
Scan Agent Skills for injection, exfiltration, and malicious code patterns.
Connect to GlobalProtect VPNs on Linux through a CLI or GUI.
Capabilities
Audience
Public GitHub facts last synced Jul 10, 2026.
Scan Electron applications for insecure settings and implementation anti-patterns.
Scan agent skills with static checks, semantic review, and sandbox execution.