cryptographic-weaknesses-audit

Identify and triage cryptographic vulnerabilities across JavaScript, Python, Go, Java, and .NET codebases.

1|1|Updated Mar 5, 2026
One-click install
npx skills add https://github.com/abhijeetkakade1234/skills --skill cryptographic-weaknesses-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cryptographic-weaknesses-audit
Source: https://github.com/abhijeetkakade1234/skills/tree/main/security-audit-orchestrator/specialized/cryptographic-weaknesses-audit
Command: npx skills add https://github.com/abhijeetkakade1234/skills --skill cryptographic-weaknesses-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill identifies dangerous cryptographic implementation flaws that lead to data breaches, account takeovers, and system compromises, ensuring your application follows modern security standards.

Core Features & Use Cases

  • Vulnerability Detection: Automatically flags weak hashes (MD5/SHA1), insecure ciphers (DES/RC4), and broken modes like ECB.
  • Security Hardening: Provides actionable guidance on implementing modern primitives like argon2id for passwords and AES-GCM for encryption.
  • Use Case: Use this during a security code review to scan your authentication and data-at-rest modules for hardcoded keys, insecure random number generation, or disabled TLS certificate validation.

Quick Start

Run the cryptographic-weaknesses-audit skill against the current directory to identify and rank all security-critical cryptographic vulnerabilities.

Frequently Asked Questions about cryptographic-weaknesses-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for weak cryptographic implementations?

This skill detects hardcoded keys, insecure random number generation, and disabled TLS certificate validation to prevent data exposure and authentication bypass during security code reviews.

Does this cryptographic vulnerability scanner support Python and Go codebases?

It validates the use of vetted primitives such as AEAD encryption, CSPRNGs, and slow password KDFs across these languages to ensure modern security standards are met.

What is the best way to detect insecure cipher modes and improper key management?

This approach identifies and triages cryptographic vulnerabilities, providing actionable guidance on implementing modern primitives to prevent system compromises.

How do I check if my application follows OWASP A02 cryptographic standards?

Validating the use of vetted primitives such as AEAD encryption and CSPRNGs ensures your application follows modern security standards and prevents data breaches.

Why should I flag weak hashes like MD5 and SHA1 during a security audit?

Automatically detecting these vulnerabilities allows you to apply security hardening and replace them with modern primitives like slow password KDFs to ensure data protection.