skills.rest
florianbuetow
florianbuetowCOMMUNITY
Explore all skills by this author →
Website𝕏@bytetweetsGitHub

crypto

Analyze source code for cryptographic weaknesses mapped to OWASP Top 10 A02.

12|1|Updated Feb 9, 2026
Search Tags:#security#vulnerability#encryption#cryptography#code audit#hashing
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill crypto-florianbuetow
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: crypto
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/crypto
Command: npx skills add https://github.com/florianbuetow/claude-code --skill crypto-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies and helps fix critical cryptographic vulnerabilities in your codebase, preventing data breaches and ensuring secure data handling.

Core Features & Use Cases

  • Vulnerability Detection: Scans for weak hashing algorithms, hardcoded keys, insecure random number generation, improper password storage, ECB mode usage, and missing TLS enforcement.
  • Actionable Fixes: Provides concrete refactoring suggestions and code snippets to remediate identified issues.
  • Use Case: Audit your application's authentication module to ensure passwords are not stored in plaintext and that strong, salted hashing algorithms are used.

Quick Start

Use the crypto skill to audit the current project for cryptographic weaknesses.

Frequently Asked Questions about crypto

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan source code for cryptographic weaknesses like broken algorithms or hardcoded keys?▼

To scan source code for cryptographic weaknesses, analyze the codebase to detect broken algorithms, hardcoded encryption keys, improper password hashing, and insecure random number generation. The process maps findings directly to OWASP Top 10 2021 A02.

What are common cryptographic failures mapped to OWASP A02?▼

Common cryptographic failures mapped to OWASP A02 include weak hashing algorithms, ECB mode usage, cleartext transmission of sensitive data, missing encryption at rest, and missing TLS enforcement. These vulnerabilities often lead to severe data breaches.

How do I audit an authentication module to ensure secure password storage?▼

Audit an authentication module for secure password storage by checking for plaintext passwords and verifying the use of strong, salted hashing algorithms. This identifies improper password hashing and provides actionable refactoring suggestions.

Can I get code refactoring suggestions to fix detected encryption vulnerabilities?▼

You can get code refactoring suggestions to fix detected encryption vulnerabilities. The analysis provides concrete code snippets and remediation strategies to correct issues like insecure random number generation and missing TLS enforcement.

Does this code audit process detect missing encryption at rest and cleartext data transmission?▼

The code audit process does detect missing encryption at rest and cleartext transmission of sensitive data. It identifies these flaws alongside insecure random number generation and hardcoded keys to secure your application.

Related Skills

Explore More Software Engineering Skills→
YukiIto1999YukiIto1999

reverse-engineering-ransomware-encryption-routine

Analyze ransomware encryption routines to identify algorithms and decryption opportunities.

Community
Advanced
latestaiagentslatestaiagents
5

sensitive-data-protection

Implement encryption, data masking, and secure logging for sensitive data.

Official
Advanced
AytsuuAytsuu

repo-scan

Audit source code files, detect third-party libraries, and generate four-level module verdicts.

Community
Advanced
BagelHoleBagelHole
46

dast-scanning

Perform DAST scans on web applications and APIs with OWASP ZAP.

Community
Intermediate