_hash-password

Generate shell-safe scrypt password hashes with Node.js.

34|6|Updated Jun 30, 2026
One-click install
npx skills add https://github.com/flavien-ia/hypervibe-harness --skill hash-password
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: _hash-password
Source: https://github.com/flavien-ia/hypervibe-harness/tree/main/skills/_hash-password
Command: npx skills add https://github.com/flavien-ia/hypervibe-harness --skill hash-password

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill solves the issue of shell-incompatible password hashes by providing a standardized, shell-safe scrypt hashing mechanism that avoids the character corruption issues associated with bcrypt.

Core Features & Use Cases

  • Shell-Safe Hashing: Generates hex-encoded salt and hash strings that are safe for environment variables and command-line arguments.
  • Secure Generation: Supports generating random, high-entropy passwords and hashing them in a single atomic operation.
  • Use Case: Use this during the authentication setup of a new project to securely generate and store admin credentials without exposing plain-text passwords or risking corruption in Vercel environment variables.

Quick Start

Ask the assistant to generate a new secure password and hash it for the current project configuration.

Frequently Asked Questions about _hash-password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Why does my bcrypt password hash get corrupted when passed through shell commands or environment variables?

Bcrypt hashes contain shell-incompatible characters that cause corruption during environment variable injection. Using shell-safe scrypt hashing generates hex-encoded salt and hash strings to prevent this exact character corruption issue.

How do I generate a secure admin password and hash it for automated project scaffolding?

You can generate a random, high-entropy password and hash it using Node.js native scrypt in a single atomic operation. This enforces strict security practices by preventing plain-text password storage during automated scaffolding workflows.

Does scrypt password hashing work safely with Vercel environment variables?

Yes, scrypt password hashing works safely with Vercel environment variables by producing hex-encoded strings. This shell-safe format ensures hashes remain intact during command-line execution and environment variable injection.

What is the best way to store credentials without exposing plain-text passwords in Node.js?

The best way to store credentials is using Node.js native scrypt to hash passwords into shell-safe hex strings. This mandates strong security practices over legacy bcrypt by preventing plain-text password exposure.

Can I generate a random password and create a scrypt hash at the same time?

Yes, you can generate a random, high-entropy password and create its scrypt hash in a single atomic operation. This secure generation streamlines credential management by outputting both elements simultaneously.