kgraph57

Claude Code Doctor — Security skill for Claude Code

Security community

Health checkup for your Claude Code setup: read-only parallel audit, A-E grades with radar chart, red flags, HTML dashboard.

How to install Claude Code Doctor

This entry records only its repository, not the path inside it, so there is no exact command to give. Open kgraph57/claude-code-doctor and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Claude Code Doctor does

Health checkup for your Claude Code setup: read-only parallel audit, A-E grades with radar chart, red flags, HTML dashboard. Battle-tested with Claude Fable 5 / Opus. Zero changes before you approve.

Alternatives in Security

  • T3mp3st — autonomous red teaming platform; multi-agent offensive-security meta-harness 5.7k ★
  • Data Viz Audit — Audit a data visualization for chart type selection, accessible color palette, annotations, and anti-patterns 309 ★
  • Rolecraft — The security-first skill manager for AI agents — every install runs a security scan 75 ★

README

🇯🇵 **日本語版READMEがあります** → [README.ja.md](README.ja.md)

Claude Code Doctor — a health checkup for your Claude Code setup

**English** | [日本語](README.ja.md)

[![License: MIT](https://img.shields.io/badge/License-MIT-0B7DA3.svg)](LICENSE) [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-0B7DA3.svg)](https://github.com/kgraph57/claude-code-doctor/pulls) [![Tests](https://github.com/kgraph57/claude-code-doctor/actions/workflows/test.yml/badge.svg)](https://github.com/kgraph57/claude-code-doctor/actions/workflows/test.yml) [![Made with Claude Code](https://img.shields.io/badge/made%20with-Claude%20Code-E8801A.svg)](https://claude.com/claude-code)

I let Claude Code audit its own setup.
It came back with 104 findings.

*Find the context tax, dead permissions, MCP bloat, and zombie automations hiding in your Claude Code setup.*

Current release: **v0.13.0** — Example Manifest validation, Renderer Bug validation, Contributed Report validation, Linux beta probe plan, 60-second walkthrough generator, Windows beta probe plan, Cross-Harness Checkups, Community Domain Packs, CI Budget Gate, and Diff Mode. See [CHANGELOG.md](CHANGELOG.md).


The 104-Finding Checkup

Claude Code Doctor is a read-only checkup for the AI-workspace layer: the context, permissions, tools, skills, automations, and evidence trails that shape what your coding agent sees before it writes a single line. Patient zero was my own two-year Claude Code setup:

What Found
Always-on context loaded every session 45,000 tokens (22.5% of the window, gone before work starts)
Permission allow-list entries 804, of which 77 pointed at paths that no longer exist
MCP tools injected every session 63, including two servers that fully overlap
Zombie automations failing silently every morning 12
Skills with colliding trigger words several clust