AgentDoctor — Security skill for Claude Code
Local CLI that audits coding-agent configuration for security, instructions, context, and MCP — no API key or code upload by default.
How to install AgentDoctor
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open pranee54/AgentDoctor and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What AgentDoctor does
Local CLI that audits coding-agent configuration for security, instructions, context, and MCP — no API key or code upload by default.
Alternatives in Security
- Bountyforge — All-round bug bounty skill for Claude Code parallelized agents for smart contract audits (EVM, Move, Solana, T 399 ★
- Data Viz Audit — Audit a data visualization for chart type selection, accessible color palette, annotations, and anti-patterns 309 ★
- Loongsuite Pilot — Local-first telemetry collector for AI coding agents — unified OpenTelemetry events for Claude Code, Codex, Cu 150 ★
README
AgentDoctor
Evidence-backed Project Brain for AI Coding Agents

AI coding agents can read files. They still lack reliable **repository-level** understanding — what is in a project, what evidence supports a claim, what is dangerous to change, and what must stay **UNKNOWN**.
AgentDoctor analyzes a repository, builds a structured **Project Brain** (claims, evidence, confidence, ownership, risks, snapshots, deltas), and exposes it to agents through local **STDIO MCP**.
[](https://www.npmjs.com/package/@praneeth_54/agentdoctor) [](https://github.com/pranee54/AgentDoctor/actions/workflows/ci.yml) [](https://nodejs.org) [](LICENSE)
[Documentation](docs/README.md) · [Project Brain](docs/project-brain.md) · [MCP](docs/mcp/brain-mcp.md) · [GitHub Action](#github-action) · [Demo](docs/demo/brain-mcp-demo.md) · [Security](SECURITY.md) · [Roadmap](ROADMAP.md)
Repository
↓
Project Understanding
↓
Project Brain
↓
Evidence / Claims / Confidence
↓
MCP
↓
AI Coding Agent
Also ships **Safety V1**: Scan → Fix → Verify → Policy → CI for Cursor, Claude Code, and Codex configuration. Brain risk is **change-danger analysis**, not vulnerability scanning.
What is AgentDoctor?
Local developer infrastructure for AI coding agents (`@praneeth_54/agentdoctor`, CLI `agentdoctor`, **1.1.0**, Node.js **20+**).
It:
- analyzes repositories with deterministic discovery passes
- builds a structured Project Brain
- represents claims with typed evidence and confidence
- preserves UNKNOWN when evidence is missing
- persists snapshots and computes deltas
- exposes Brain capabilities through MCP (`
Related Skills
API Security Review Local
OWASP API Security Top 10 review using a local LM Studio model. No API key required.
Auth Review Local
Deep-dive auth security review using a local LM Studio model. OAuth, JWT, sessions, CSRF, MFA, RBAC, multi-ten
Agent Context Bench
Audit AGENTS.md, CLAUDE.md, Cursor and Copilot instructions; measure token cost and benchmark AI coding-agent
KeyValet
Give your AI agents a valet key, not your master key. Local credential broker for AI agents (MCP) on macOS: To
Cchub
Desktop hub for managing Claude Code MCP servers, health checks, configuration profiles, skills, plugins, hook
Mcpick
Vendor-neutral MCP configuration manager — one CLI to add, toggle, and audit MCP servers and skills across eve
Related Agents
Claude Context Local
Code search MCP for Claude Code. Make entire codebase the context for any coding agent. Embeddings are created
LinkedIn Operator
Executes LinkedIn writes that have no API, through a logged-in browser MCP (Claude in Chrome or Playwright): p
Claude Code MCP Enhanced
by grahama1970 - Provides detailed and emphatic instructions for Claude to follow as a coding agent, with test