claude-code-security-toolkit - Private security toolkit for Claude Code CLI - Com

项目说明

Claude Code Security Toolkit

> Public Repository - Security hardening and monitoring tools for Claude Code CLI en

⚠️ SECURITY NOTICE: This repository contains configuration TEMPLATES. Ne actual security-config.json or storage-rules.json files with your real system paths, credentials, or sensiti. Always customize configurations locally and keep them in .gitignore.

O

This toolkit provides comprehensi controls, monitoring, and hardening measures for Claude Code CLI installations. It addresses identified and implements defense-in-depth strategies to protect against unauthorized operations, data exfiltration, and beha manipulation.

Purpose

Key Features

---

Quick Start

1. Installation

2. Configuration

3. Deploy Hooks

---

Repository Structure

---

Security Controls

1. File Access Control

Purpose: Prevent unauthorized file system access

Features:

Co: Write, Edit, NotebookEdit, Read operations

2. Command Execution Monitoring

Purpose: Prevent command injection and malicious shell operations

Features:

Co: Bash tool operations

3. Network Activity Control

Purpose: Prevent data exfiltration and unauthorized network access

Features:

Co: WebFetch, WebSearch operations

4. Enumeration Detection

Purpose: Detect reconnaissance and information gathering attempts

Features:

Co: Glob, Grep operations

5. Agent Spawning Monitoring

Purpose: Track and control sub-agent creation

Features:

Co: Task tool operations

6. Beha Constraints

Purpose: Enforce transparent, clear communication

Features:

Co: All Claude Code communications

7. Audit Logging

Purpose: Maintain comprehensi trail

Features:

Co: All monitored operations

8. Rate Limiting

Purpose: Detect and prevent automated/scripted abuse

Features:

Co: All tool operations

---

Identified Gaps Addressed

This toolkit addresses 15 identified security gaps in standard Claude Code installations:

Critical Gaps (Fixed)

High/Medium Gaps (Fixed)

Additional Hardening

See docs/references/gap-details.md for detailed information.

---

Configuration

Security Configuration

File: ~/.claude/security-config.json

Storage Rules

File: ~/.claude/storage-rules.json

See docs/guides/configuration.md for complete options.

---

Usage

Deploy Enhanced Hooks

Test Security Controls

Analyze Audit Logs

Check System Integrity

---

Maintenance

Regular Tasks

1. Review Audit Logs: Check ~/.claude/audit.jsonl weekly
2. Update Patterns: Keep hooks/utils/patterns.py current
3. Test Enforcement: Run tests after any changes
4. Backup Configuration: Use scripts/backup-config.sh

Updating Hooks

Troubleshooting

See docs/guides/troubleshooting.md for common issues and solutions.

---

Reports and Analysis

Included Reports

1. Integrity Assessment - Initial system analysis
2. Corrected Assessment - User perspecti
3. Security Gap Analysis - Detailed assessment

All reports a in docs/reports/.

Attack Scenarios

Three documented attack chains:
1. Credential Exfiltration
2. Persistent Backdoor Installation
3. Mass Data Enumeration

See docs/references/attack-scenarios.md.

---

De

Adding Custom Hooks

1. Create hook in hooks/enhanced/
2. Add to config/templates/settings.json
3. Test with tests/test-hooks.sh
4. Document in docs/guides/

Hook De Reference

See docs/references/hook-api.md for:

---

Security Policy

Reporting Issues

If you disco in this toolkit:

1. Do NOT open public issues
2. Contact repository owner directly
3. Provide detailed reproduction steps
4. Allow time for patching before disclosure

See SECURITY.md for full policy.

---

License

This toolkit is provided for personal use in protecting user-owned systems. See LICENSE for details.

---

Support

Documentation

Issues

For issues, questions, or impro, open an issue in this repository.

---

Acknowledgments

This toolkit was de in response to observed gaps in Claude Code CLI security controls. It represents user-implemented protecti to ensure transparent, accountable, and secure operation.

: 1.0.0
Last Updated: 2025-10-29

项目信息

开发语言：Python

Star 数：1

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Private security toolkit for Claude Code CLI - Comprehensive defensive measures addressing 15 identified security gaps展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。