Issues

• Skill files get no content analysis: prompt override, curl|bash and credential-exfiltration payloads in a skill score medium, same bytes in CLAUDE.md score critical

  affaan-m/agentshield#168 · Filter by author naamanhirschfeld-armis opened on Oct 15, 2026
  1

• False positives on non-English CLAUDE.md: negation and prompt-defense checks are English-only

  affaan-m/agentshield#163 · Filter by author theo-stoffelbach opened on Oct 13, 2026

• False positive: .vscode/settings.json and tasks.json are checked with Claude Code settings rules

  affaan-m/agentshield#162 · Filter by author theo-stoffelbach opened on Oct 13, 2026

• Exact-script allow rule Bash(bash path/script.sh) scored critical as equivalent to Bash(*)

  affaan-m/agentshield#159 · Filter by author one-hopeless-developer opened on Oct 3, 2026
  3

• False positive: hook script named *sudo-guard* flagged as privilege escalation

  affaan-m/agentshield#158 · Filter by author one-hopeless-developer opened on Oct 3, 2026

• False positive: jq -nc flagged as "Hook sends data to external service" (matches "nc")

  affaan-m/agentshield#157 · Filter by author one-hopeless-developer opened on Oct 3, 2026

• 'Missing deny rule: Writing to device files' can only be satisfied by a rule Claude Code doesn't enforce

  affaan-m/agentshield#156 · Filter by author hudsonmolthan opened on Sep 26, 2026
  1

• plugins/marketplaces clones are scanned as live config, at full weight, including plugins that aren't installed

  affaan-m/agentshield#155 · Filter by author hudsonmolthan opened on Sep 26, 2026

• Jailbreak-framing false positive on 'The test: You can …' in CLAUDE.md

  affaan-m/agentshield#154 · Filter by author hudsonmolthan opened on Sep 26, 2026

• Scanning ~/.claude directly rates its settings.json as project scope (statusLine critical instead of medium)

  affaan-m/agentshield#153 · Filter by author hudsonmolthan opened on Sep 26, 2026

• Secrets: every sha512 integrity hash in package-lock.json is reported as a critical 'Azure storage account key'

  affaan-m/agentshield#152 · Filter by author hudsonmolthan opened on Sep 26, 2026
  1

• bug: nested .claude/skills/<name>/SKILL.md are silently never scanned (discovery is non-recursive)

  affaan-m/agentshield#151 · Filter by author darthridder opened on Sep 20, 2026
  2

• bug: Too much noise/verbose output

  affaan-m/agentshield#150 · Filter by author gw0 opened on Sep 17, 2026

• feat: Add --exclude-dir/--exclude options

  affaan-m/agentshield#149 · Filter by author gw0 opened on Sep 17, 2026

• bug: Baseline does not follow symlinks

  affaan-m/agentshield#148 · Filter by author gw0 opened on Sep 17, 2026

• scan crashes with EISDIR when .clinerules is a directory (e.g. inside cached plugin dirs)

  affaan-m/agentshield#147 · Filter by author furtadomonteiro1982-web opened on Sep 11, 2026
  2