crypto

Analyze source code for cryptographic weaknesses mapped to OWASP Top 10 A02.

12|1|Updated Feb 9, 2026

Search Tags:#security #vulnerability #encryption #cryptography #code audit #hashing

Ready to run

npx skills add https://github.com/florianbuetow/claude-code --skill crypto-florianbuetow

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: crypto
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/crypto
Command: npx skills add https://github.com/florianbuetow/claude-code --skill crypto-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies and helps fix critical cryptographic vulnerabilities in your codebase, preventing data breaches and ensuring secure data handling.

Core Features & Use Cases

Vulnerability Detection: Scans for weak hashing algorithms, hardcoded keys, insecure random number generation, improper password storage, ECB mode usage, and missing TLS enforcement.
Actionable Fixes: Provides concrete refactoring suggestions and code snippets to remediate identified issues.
Use Case: Audit your application's authentication module to ensure passwords are not stored in plaintext and that strong, salted hashing algorithms are used.

Quick Start

Use the crypto skill to audit the current project for cryptographic weaknesses.

Frequently Asked Questions about crypto

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan source code for cryptographic weaknesses like broken algorithms or hardcoded keys?▼

To scan source code for cryptographic weaknesses, analyze the codebase to detect broken algorithms, hardcoded encryption keys, improper password hashing, and insecure random number generation. The process maps findings directly to OWASP Top 10 2021 A02.

What are common cryptographic failures mapped to OWASP A02?▼

Common cryptographic failures mapped to OWASP A02 include weak hashing algorithms, ECB mode usage, cleartext transmission of sensitive data, missing encryption at rest, and missing TLS enforcement. These vulnerabilities often lead to severe data breaches.

How do I audit an authentication module to ensure secure password storage?▼

Audit an authentication module for secure password storage by checking for plaintext passwords and verifying the use of strong, salted hashing algorithms. This identifies improper password hashing and provides actionable refactoring suggestions.

Can I get code refactoring suggestions to fix detected encryption vulnerabilities?▼

You can get code refactoring suggestions to fix detected encryption vulnerabilities. The analysis provides concrete code snippets and remediation strategies to correct issues like insecure random number generation and missing TLS enforcement.

Does this code audit process detect missing encryption at rest and cleartext data transmission?▼

The code audit process does detect missing encryption at rest and cleartext transmission of sensitive data. It identifies these flaws alongside insecure random number generation and hardcoded keys to secure your application.