security-scan
使用AgentShield扫描您的Claude代码配置（.claude/目录），以发现安全漏洞、配置错误和注入风险。检查CLAUDE.md、settings.json、MCP服务器、钩子和代理定义。
82
73%
Does it follow best practices?
Impact
100%
1.72xAverage score across 3 eval scenarios
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./docs/zh-CN/skills/security-scan/SKILL.mdLow
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W012: Unverifiable external dependency detected (runtime URL that controls agent)
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
Potentially malicious external URL detected (high risk: 0.90). Flagging https://github.com/affaan-m/agentshield and the npm package https://www.npmjs.com/package/ecc-agentshield because the skill explicitly calls npx ecc-agentshield at runtime (and the GitHub/npm URLs point to the code that will be fetched and executed), making it a required external dependency that runs remote code.
- Repository
- affaan-m/ECC
- Commit
06c5e11
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.