Scan source code for weak hashes, insecure cipher modes, and TLS verification weaknesses.
npx skills add https://github.com/fatihkan/badi --skill sc-crypto-fatihkan
Please help me install this Agent Skill. Skill: sc-crypto Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-crypto Command: npx skills add https://github.com/fatihkan/badi --skill sc-crypto-fatihkan
Detects cryptography misuse in codebases to prevent weak cryptographic practices and insecure implementations.
Run the sc-crypto scanner against your codebase to surface cryptography weaknesses.
High-intent search queries and answers about installing and using this skill.
You can detect weak cryptography like MD5 or ECB mode by running a pattern-driven source code scanner. It identifies insecure implementations across languages and outputs structured findings suitable for remediation workflows.
Common cryptography misuses to scan for include weak hashes like MD5 and SHA1, insecure cipher modes such as ECB, hardcoded initialization vectors, weak PRNGs, improper key handling, and TLS verification weaknesses across languages and environments.
Yes, you can scan for hardcoded initialization vectors and improper key handling across different programming languages. The scanner applies concrete vulnerability patterns to discover these security weaknesses regardless of the specific environment.
The best way to find weak PRNG usage and TLS verification weaknesses is using a pattern-driven discovery scanner. It flags these specific cryptography misuses in source code and configurations to prevent data exposure.
Yes, the scanner outputs structured findings suitable for automated remediation workflows. After identifying cryptography misuse such as static IVs or weak hashes, it provides actionable data to fix weak security practices.
YukiIto1999Identifies cryptographic weaknesses in Python code, config files, and TLS endpoints.
ersinkocDetect cryptography misuse in multi-language codebases with rule-based static analysis.
SkobynDetect TLS/SSL and DNS security vulnerabilities using testssl.sh, sslyze, dig, and curl.
DevHive1Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.
