remediation-crypto

Name: remediation-crypto
Availability: InStock
Author: Zate

Remediate cryptographic vulnerabilities with language-specific secure code patterns.

9|2|Updated Dec 5, 2025

Search Tags:#encryption #cryptography #randomness #TLS

Ready to run

npx skills add https://github.com/Zate/cc-plugins --skill remediation-crypto

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: remediation-crypto
Source: https://github.com/Zate/cc-plugins/tree/main/plugins/security/skills/remediation-crypto
Command: npx skills add https://github.com/Zate/cc-plugins --skill remediation-crypto

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Actionable fix patterns for cryptography-related vulnerabilities, including safe hashing, secure randomness, TLS best practices, and encryption.

Core Features & Use Cases

Strong crypto: recommendations to replace weak algorithms.
Secure randomness: guidance on CSPRNG usage.
TLS & encryption: proper TLS setup and AEAD encryption usage.

Quick Start

Replace insecure hashing with bcrypt or Argon2 for password storage.

Frequently Asked Questions about remediation-crypto

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I fix weak cryptographic algorithms like MD5 and SHA1 in my code?▼

Replace weak hashing algorithms with strong alternatives: use bcrypt or Argon2 for password storage, SHA-256 or better for general hashing. The Skill provides language-specific remediation patterns for Python, JavaScript, Java, and Go to securely implement these replacements across your codebase.

What's the best way to generate secure random values in Python, JavaScript, Java, or Go?▼

Use cryptographically secure random number generators (CSRNGs) instead of standard libraries. The Skill maps insecure randomness vulnerabilities (CWE-330) and supplies ready-to-use secure randomness patterns for each language with actionable examples.

How do I verify TLS certificates properly and avoid man-in-the-middle attacks?▼

Implement proper TLS verification by validating certificates and hostnames in your client code. The Skill addresses TLS verification issues with language-specific guidance for Python, JavaScript, Java, and Go to prevent insecure connections.

What encryption modes should I use instead of DES or insecure cipher modes?▼

Use authenticated encryption with associated data (AEAD) ciphers like AES-GCM instead of older or unauthenticated modes. The Skill provides secure encryption patterns and OWASP Cryptographic Storage best practices for multiple languages.

Can I use this Skill during code review to identify cryptographic vulnerabilities?▼

Yes. The Skill maps to CWE-327 and CWE-330, enabling practical vulnerability identification during peer review. It supplies actionable remediation examples across Python, JavaScript, Java, and Go for fixing weak cryptography, insecure randomness, and TLS issues in live codebases.