Secrets & instructions
Exposed credentials and unsafe instructions in agent configuration, including instructions to download and execute remote code.
AgentShield Security for your agent setupReview what your
agents can do.
Agent configuration is part of your security surface. Scan for exposed secrets, unsafe instructions, broad permissions, and risky hook or MCP settings—with findings you can inspect.
AgentShield in action
See the scanner at work.
The original hackathon demonstration.
Watch the original video on YouTube ↗3 minutes · Historical demo
Start with your repository
Make the configuration reviewable.
Run from the repository you want to inspect. The dot selects the current directory.
npx ecc-agentshield scan --path .Inside the scan
Find the risky details.
Review findings with their severity, file locations, and remediation guidance.
Permissions & hooks
Broad tool access, dangerous shell permissions, and hook settings that expand what an agent can execute.
MCP configuration
Server commands, exposed environment values, and configuration choices that increase the agent's access.
Keep it in your workflow
From a local scan to CI.
Use the CLI for a repository review, or the GitHub Action in your existing workflow. The source and setup instructions are open to inspect.