Analyze JWT, hashing, encryption, and key management across codebases.
npx skills add https://github.com/kaivyy/perseus --skill perseus-crypto
Please help me install this Agent Skill. Skill: perseus-crypto Source: https://github.com/kaivyy/perseus/tree/main/skills/perseus/specialists/crypto Command: npx skills add https://github.com/kaivyy/perseus --skill perseus-crypto
Cryptographic weaknesses in applications can lead to data breaches and credential compromises. This skill helps security engineers perform comprehensive cryptographic analysis across codebases, focusing on JWT concerns, password hashing, encryption practices, and key management across major languages.
Run the crypto specialist on a repository to identify JWT misconfigurations, hashing weaknesses, and misused encryption practices.
High-intent search queries and answers about installing and using this skill.
To audit JWT validation and encryption weaknesses, run a cryptographic analysis to detect algorithm confusion, weak secrets, improper IV/nonce handling, and missing validations across Node.js, Go, Python, and Java codebases.
JWT algorithm confusion is a vulnerability where attackers bypass token validation by altering the signing algorithm. Security audits detect this by enforcing strict algorithm validation and analyzing JWT implementations for missing checks across your codebase.
To check password hashing policies, perform a hashing analysis to verify adequate salt usage, appropriate cost factors, and resistance against common attacks across your application's codebase to ensure secure credential storage.
Yes, cryptographic analysis supports automated security scans in CI/CD pipelines through phase-based execution guidance, enabling deterministic checks for secure RNG, strong secret handling, and safe key management during code reviews.
The best way to identify hardcoded keys and weak ciphers is executing an encryption review and key-management analysis, which flags insecure encryption modes and unsafe key practices across major ecosystems like Node.js, Go, and Python.
pekralGenerate README, CONTRIBUTING, and SECURITY files from repository source code.
bl1nk-botAnalyze codebases and generate prioritized security findings with remediation steps.
rnavarychAutomate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.
sumik5Enforce secure coding practices for authentication, authorization, and secrets management.
