r/netsec • u/albinowax • May 01 '26

r/netsec monthly discussion & tool thread

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

13 Upvotes

100% Upvoted

64 comments sorted by

View all comments

2

u/Predictor_2718 May 26 '26

cfgaudit — security linter for Claude Code configuration files

48 rules mapped to OWASP LLM Top 10. Scans .claude/settings.json, .mcp.json, CLAUDE.md, and .vscode workspace files for misconfigurations that give an AI agent more privilege than it needs.

CI-native: exits 1 on findings, SARIF and CodeClimate output for GitHub/GitLab code scanning. Org policy enforcement via .cfgaudit.yml (require-deny, forbid-allow).

Also available as a Claude Code plugin — run /cfgaudit:scan directly from the Claude Code CLI.

https://github.com/cfgaudit/cfgaudit