skills.rest
Zate
ZateCOMMUNITY
Explore all skills by this author →
GitHub

remediation-crypto

Remediate cryptographic vulnerabilities with language-specific secure code patterns.

9|2|Updated Dec 5, 2025
Search Tags:#encryption#cryptography#randomness#TLS
One-click install
npx skills add https://github.com/Zate/cc-plugins --skill remediation-crypto
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: remediation-crypto
Source: https://github.com/Zate/cc-plugins/tree/main/plugins/security/skills/remediation-crypto
Command: npx skills add https://github.com/Zate/cc-plugins --skill remediation-crypto

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Actionable fix patterns for cryptography-related vulnerabilities, including safe hashing, secure randomness, TLS best practices, and encryption.

Core Features & Use Cases

  • Strong crypto: recommendations to replace weak algorithms.
  • Secure randomness: guidance on CSPRNG usage.
  • TLS & encryption: proper TLS setup and AEAD encryption usage.

Quick Start

Replace insecure hashing with bcrypt or Argon2 for password storage.

Frequently Asked Questions about remediation-crypto

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fix weak cryptographic algorithms like MD5 and SHA1 in my code?▼

Replace weak hashing algorithms with strong alternatives: use bcrypt or Argon2 for password storage, SHA-256 or better for general hashing. The Skill provides language-specific remediation patterns for Python, JavaScript, Java, and Go to securely implement these replacements across your codebase.

What's the best way to generate secure random values in Python, JavaScript, Java, or Go?▼

Use cryptographically secure random number generators (CSRNGs) instead of standard libraries. The Skill maps insecure randomness vulnerabilities (CWE-330) and supplies ready-to-use secure randomness patterns for each language with actionable examples.

How do I verify TLS certificates properly and avoid man-in-the-middle attacks?▼

Implement proper TLS verification by validating certificates and hostnames in your client code. The Skill addresses TLS verification issues with language-specific guidance for Python, JavaScript, Java, and Go to prevent insecure connections.

What encryption modes should I use instead of DES or insecure cipher modes?▼

Use authenticated encryption with associated data (AEAD) ciphers like AES-GCM instead of older or unauthenticated modes. The Skill provides secure encryption patterns and OWASP Cryptographic Storage best practices for multiple languages.

Can I use this Skill during code review to identify cryptographic vulnerabilities?▼

Yes. The Skill maps to CWE-327 and CWE-330, enabling practical vulnerability identification during peer review. It supplies actionable remediation examples across Python, JavaScript, Java, and Go for fixing weak cryptography, insecure randomness, and TLS issues in live codebases.

Related Skills

Explore More Software Engineering Skills→
kalshamsikalshamsi
1

crypto-audit

Detect cryptographic anti-patterns in JavaScript, Python, Go, Java, and Rust code.

Community
Advanced
bejranondabejranonda
27

security-patterns

Identify and remediate security vulnerabilities using OWASP Top 10 guidance.

Community
Intermediate
veilkeyveilkey
7

security-audit

Audit VeilKey code for cryptographic integrity and secret safety.

Official
Advanced
hackIDLEhackIDLE
21

crypto-validation

Validate cryptographic module FIPS compliance and assess vulnerability risk.

Official
Intermediate