1. Install
Use the project’s documented installation path, then verify the installed version.
Installation instructions → Navigation Explore Code Guide
Security hub
Secure Claude Code and AI Agents
Start with a local repository check, review current evidence, then follow the security path that matches your task.
Threat DB v2.29.0Updated September 12, 2026
Local check
Start with your repository
Install AgentSec and run its current alpha scanner locally. This website does not receive or inspect your files.
agentsec scan /path/to/repository --format json --redactCurrent evidence, with its date
These values come from the bundled AgentSec feed and describe that database snapshot. They are not live measurements of the entire ecosystem.
- Skills Scanned
- 3,984
- Have Flaws
- 36.82%
- Critical-Risk
- 534
- Malicious Payloads
- 76
- CVEs & Advisories
- 131
- Exposed Servers
- ~1,000
Verify your repository with AgentSec
The scanner checks bounded repository inputs against bundled intelligence. A clean result is not proof of safety.
2. Run locally
Execute the scan inside the target repository. Review the exact files and evidence behind each finding.
Inspect AgentSec source →3. Respect the boundary
Current detectors do not cover every host-level persistence mechanism, Git-history witness, or runtime behavior.
2 detector records
- clawhavoc-skill v1: Detect repository-local agent-skill evidence associated with the documented ClawHavoc fake-prerequisite campaign.
- shai-hulud-keyv v1: Detect repository-local indicators associated with the August 2026 Shai-Hulud Keyv/cacheable npm campaign.
Choose the task, not the scroll depth
Each route answers one intent completely. The hub keeps orientation and current evidence without repeating every catalogue.
Threat intelligence
Understand how current attacks work, which ecosystems they affect, and which evidence supports each record.
Open this pathVulnerability database
Check whether a component is affected, inspect the primary source, and find the documented remediation.
Open this pathIsolation guide
Choose an isolation boundary, understand what it excludes, and verify the controls before running an agent.
Open this pathDefensive baseline
Reduce immediate risk, strengthen a workstation, and establish repeatable controls for a development team.
Open this pathLatest sourced intelligence
Three recent feed events, ordered by their canonical date. Follow the source before making a time-sensitive decision.
VS Code: Webview resource root escape
A webview using non-file resource schemes can exploit inconsistent separator handling to read content outside the extension's allowed resource roots.
VS Code: Copilot Chat ADO token endpoint override
Repository settings can redirect authenticated Azure DevOps Code Search requests to an attacker endpoint and expose the user's token.
VS Code: Chat remote media request before filtering
Rendering agent-provided remote media can initiate a request before the chat policy removes the element, potentially leaking data encoded in its URL, including on history restoration.
Three checks before you continue
Use this quick pass now. The full hardening route keeps the complete workstation and team checklist.
0 of 3 complete
Looking for a section from the previous page?
The content remains available at a focused destination. These anchors preserve old bookmarks and inbound links.
Attack techniques
Mechanisms, examples, campaigns, and mitigations.
Open threats →CVE database
Searchable vulnerabilities, fixed-version status, and mitigations.
Open CVEs →AgentSec intelligence
Dated event records and explicit detector coverage.
Open intelligence →Active campaigns
Tracked campaign records with reported dates and sources.
Open campaigns →Threat database
Filter events, campaigns, authors, and malicious skills.
Search threats →The sandbox
Protection boundaries, silent failures, configuration, and runtime checks.
Configure sandbox →Defense tools
Capabilities and limits of the maintained scanner collection.
Compare tools →Built-in commands
Quick checks, full audits, and the threat database terminal.
Open commands →Essential sources
Dates describe the source record. Recheck the linked source before acting on time-sensitive risk information.
- Anthropic - Claude Code September permission and plugin fixes
- Manifold Security - GitSpawn repository configuration research
- Microsoft - VS Code: Nested configuration Restricted Mode bypass
- Microsoft - VS Code: Agent URL authority and domain policy bypass
- Microsoft - VS Code: Webview resource root escape
- Microsoft - VS Code: Copilot Chat ADO token endpoint override
- Microsoft - VS Code: Chat remote media request before filtering
- Microsoft - VS Code: MCP gallery metadata path traversal