Claude Code Security Auditor

Example Use Cases

• 1

  Verify the security of third-party Claude Code artifacts before installation.

• 2

  Scan multiple artifact types including skills, hooks, MCP servers, Docker, and dependencies.

• 3

  Integration with CI/CD pipelines and real-time scanning during development.

Description

cc-audit scans third-party Claude Code artifacts such as Skills, Hooks, and MCP Servers for security vulnerabilities including data exfiltration, privilege escalation, persistence, prompt injection, and overpermission. It supports multiple scan types and clients, provides risk scoring, and offers various output formats for integration with CI/CD pipelines. This tool helps close the security gap left by the lack of official audits, ensuring safer use of third-party Claude Code components.