# Agentshield Security Review > repository-native security review workflow for Claude Code, Cursor, Codex, OpenCode, Grok, and Kimi projects using the AgentShield concept. Use when auditing or hardening agent configuration, skills, prompts, hooks, MCP servers, permissions, commands, plugin files, AGENTS.md, CLAUDE.md, or repository-level AI coding-agent surfaces. Prefer this skill before merging changes to .claude, .cursor, .co… - **Type:** Skill - **Install:** `agentstack add skill-giang6283623-minimal-vibe-coding-kit-agentshield-security-review` - **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior - **Seller:** [giang6283623](https://agentstack.voostack.com/s/giang6283623) - **Installs:** 0 - **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills) - **Latest version:** 0.1.0 - **License:** MIT - **Upstream author:** [giang6283623](https://github.com/giang6283623) - **Source:** https://github.com/giang6283623/minimal-vibe-coding-kit/tree/main/.claude/skills/agentshield-security-review ## Install ```sh agentstack add skill-giang6283623-minimal-vibe-coding-kit-agentshield-security-review ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About # AgentShield Security Review Use this skill to run an AgentShield-style review for Claude Code, Cursor, Codex, OpenCode, Grok, and Kimi repositories. Treat the repo root as the source of truth, then inspect agent surfaces before normal code review. ## Core rule Do not invent findings. Prefer deterministic scanner output when available, then add reviewer judgment separately. Clearly label each finding as `scanner-backed`, `manual-confirmed`, or `manual-suspected`. ## Standard workflow 1. Identify the repo root and active harness surfaces. 2. Run `node .vibekit/scripts/agentshield-probe.mjs .` to inventory active provider surfaces, shared skills, hooks, MCP, commands, and repo instruction files. 3. Check whether the scanner is already installed locally: ```bash npm ls ecc-agentshield --depth=0 --ignore-scripts ``` If it is unavailable, use the fallback manual review by default. Fetching and executing a package is a separate trust decision; request approval before using the exact reviewed version. 4. With a local install or explicit approval, run the version-pinned scanner from the repo root: ```bash npx ecc-agentshield@1.4.0 scan --path . --format text ``` 5. If JSON is needed for CI or automation, run: ```bash npx ecc-agentshield@1.4.0 scan --path . --format json ``` 6. If safe auto-fixes are requested, first summarize the proposed edits, then run: ```bash npx ecc-agentshield@1.4.0 scan --path . --fix ``` 7. Re-run the scan after fixes and report before/after score, severity counts, and changed files. 8. If AgentShield is unavailable or package execution is not approved, perform the fallback manual review in `references/review-checklist.md`. ## Harness-native layout Use a shared root skill where possible: - `.vibekit/skills/agentshield-security-review/SKILL.md` is the canonical workflow. - Claude Code may add a slash-command shim in `.vibekit/commands/security-scan.md` or `.claude/commands/security-scan.md`. - Codex and OpenCode consume the shared `.agents/skills/` registry. Codex may additionally use `.codex-plugin/plugin.json`; OpenCode uses `.opencode/commands/` and its root `opencode.json` permissions. - Do not duplicate divergent Claude, Codex, and OpenCode skill bodies. Duplication causes drift. See `references/native-install.md` for copy-ready Claude, Codex, and OpenCode snippets. ## What to inspect Prioritize runtime-active files over examples and docs: 1. `CLAUDE.md`, `AGENTS.md`, `.github/copilot-instructions.md` 2. `.claude/settings.json`, `.claude/settings.local.json`, `.claude/agents/*.md`, `.claude/commands/*.md` 3. `.cursor/settings.json`, `.cursor/cli.json`, `.cursor/rules/`, `.cursor/commands/` 4. `.codex/config.toml`, `.codex/`, `.codex-plugin/plugin.json` 5. `.opencode/`, `opencode.json` 6. `.grok/`, `.kimi-code/` 7. `.agents/`, `agents/`, `.vibekit/skills/`, `.vibekit/commands/`, `.vibekit/scripts/`, `hooks/` 8. `.mcp.json`, `mcp.json`, `mcp-configs/*.json` 9. installer scripts, CI workflows, package scripts, and generated plugin manifests ## Output contract Return a concise report with: - Security grade/score if AgentShield provides one. - Commands run and whether the scan was `npx`, local, CI, or fallback-manual. - Active harness surfaces found. - Critical/high findings with exact paths, severity, confidence, exploit impact, and fix. - Medium/low findings grouped separately. - Safe auto-fix candidates versus manual-only changes. - Provider-native installation notes when the repo lacks a configured surface. - Final remediation order. Use `references/report-template.md` for the preferred report format. ## Safety constraints - Never print full secrets. Show only the file path and key name or a redacted prefix/suffix. - Do not run untrusted hook scripts, MCP server commands, package scripts, or installer scripts just to inspect them. - Do not replace the pinned `ecc-agentshield@1.4.0` command with an unpinned `npx` invocation. - Do not apply `--fix` without first stating the planned edit types. - Treat wildcard shell permissions, unpinned `npx`, shell-running MCP servers, prompt-injection instructions, and silent hook failures as high-risk until proven otherwise. ## Source & license This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [giang6283623](https://github.com/giang6283623) - **Source:** [giang6283623/minimal-vibe-coding-kit](https://github.com/giang6283623/minimal-vibe-coding-kit) - **License:** MIT Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v0.1.0 — what this tool can access: - **Network access:** no - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** no *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** — security scan: passed — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/skill-giang6283623-minimal-vibe-coding-kit-agentshield-security-review - Seller: https://agentstack.voostack.com/s/giang6283623 - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.