Skills
.Work. You
Rest

security-review-owasp-password-storage

Community

Find weak password storage fast

Software Engineering#owasp#migration#security review#hashing#bcrypt#argon2id#password storage
Authorsjinks
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill helps reviewers spot password storage flaws that make credential theft easier, including reversible storage, weak hashing, poor parameter choices, and unsafe migration logic.

Core Features & Use Cases

  • Hashing and Configuration Review: Checks whether passwords use Argon2id, bcrypt, scrypt, or PBKDF2 with appropriate parameters.
  • Salt, Pepper, and Secret Handling: Verifies unique salts, safe pepper separation, and other controls that protect hashes after a database breach.
  • Migration and Edge Cases: Reviews legacy hash upgrades, rehash-on-login flows, and input handling for long passwords, Unicode, and truncation risks.
  • Use Case: Use this Skill to assess an authentication service, confirm whether stored passwords can withstand offline cracking, and identify upgrade paths for legacy hashes.

Quick Start

Ask the skill to review the password hashing, salt, pepper, and migration logic in the authentication flow you want assessed.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: security-review-owasp-password-storage
Download link: https://github.com/sjinks/ai-owasp-skillset/archive/main.zip#security-review-owasp-password-storage

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 536,000+ vetted skills library on demand.