skills.rest
ruvnet
ruvnetCOMMUNITY
Explore all skills by this author →
Website𝕏@ruvGitHub

agent-v3-security-architect

Designs security architecture and CVE remediation plans for the v3 codebase overhaul.

70.1k|8.4k|Updated Jun 2, 2025
Search Tags:#security architecture#command injection#bcrypt#Threat Modeling#typeScript#cve remediation#Path Traversal
One-click install
npx skills add https://github.com/ruvnet/claude-flow --skill agent-v3-security-architect
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agent-v3-security-architect
Source: https://github.com/ruvnet/claude-flow/tree/main/.agents/skills/agent-v3-security-architect
Command: npx skills add https://github.com/ruvnet/claude-flow --skill agent-v3-security-architect

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It addresses critical security vulnerabilities in the v3 codebase—outdated dependencies, weak password hashing, hardcoded credentials, command injection, and path traversal—by producing a complete threat model and remediation plan.

Core Features & Use Cases

  • CVE Remediation Planning: Maps each identified vulnerability (CVE-1 through HIGH-2) to specific files, fixes, and timelines.
  • Threat Modeling: Defines security boundaries across API, authentication, authorization, agent communication, and storage layers.
  • Secure Patterns Catalog: Provides reusable TypeScript patterns for input validation with Zod, path sanitization, and safe command execution via execFile.
  • Use Case: A team starting a security overhaul invokes this agent to generate SECURITY-ARCHITECTURE.md, CVE-REMEDIATION-PLAN.md, and THREAT-MODEL.md deliverables for Phase 1.

Quick Start

Invoke the v3 security architect agent to produce a threat model and CVE remediation plan for the codebase.

Frequently Asked Questions about agent-v3-security-architect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fix command injection vulnerabilities in Node.js spawn calls?▼

Replace spawn or exec calls that use shell:true with execFile, passing arguments as an array with shell disabled. This prevents user input from being interpreted as shell commands, eliminating injection risk.

How to remediate weak SHA-256 password hashing in an auth service?▼

Migrate from SHA-256 with hardcoded salts to bcrypt with 12 rounds. The remediation plan targets the auth service hashing logic and schedules the fix within Phase 1 Week 1.

What does a threat model for an agent-based system cover?▼

It covers five boundaries: API input validation and rate limiting, token-based authentication, role-based authorization, encrypted inter-agent messaging, and encryption at rest for storage layers.

How do I prevent path traversal in file operation modules?▼

Resolve user-supplied paths against an allowed prefix using path.resolve, then verify the result still starts with the resolved prefix. Reject any path that escapes the allowed directory with a security error.

What are the limitations of this security architecture skill?▼

It produces architecture documents, remediation plans, and pattern catalogs rather than applying code fixes directly. Implementation is delegated to a separate security implementer agent, and validation to a security tester agent.

Related Skills

Explore More Software Engineering Skills→
AsiaOstrichAsiaOstrich
70

discover

Assess project health, architecture, and risks in existing codebases.

Community
Intermediate
TechyMTTechyMT
5

system-boundaries

Centralize external API, shell, and filesystem calls through service modules.

Community
Advanced
monomono
5.5k

security-audit

Audit SkiaSharp native dependencies for CVEs and generate a Security Audit Report.

Official
Advanced
luokai25luokai25

devsecops-expert

Integrates security scans into CI/CD pipelines automating vulnerability detection.

Community
Advanced