skills.rest
dmuhoro
dmuhoroCOMMUNITY
Explore all skills by this author →
GitHub

V3 Security Overhaul

Remediates critical CVEs and implements secure-by-default patterns for claude-flow v3.

Updated Mar 25, 2026
Search Tags:#security#secure coding#bcrypt#claude-flow#path traversal#zod validation#cve remediation
One-click install
npx skills add https://github.com/dmuhoro/EasyTutor --skill v3-security-overhaul-dmuhoro
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: V3 Security Overhaul
Source: https://github.com/dmuhoro/EasyTutor/tree/main/archive/.claude/skills/v3-security-overhaul
Command: npx skills add https://github.com/dmuhoro/EasyTutor --skill v3-security-overhaul-dmuhoro

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires bcrypt, zod.

What problem does it solve? It addresses critical security vulnerabilities in claude-flow v3, including vulnerable dependencies, weak password hashing, and hardcoded credentials, by orchestrating a structured security overhaul with specialized agents. ## Core Features & Use Cases - CVE Remediation: Fixes CVE-1 (vulnerable dependencies via npm audit), CVE-2 (replaces SHA-256 hashing with bcrypt at 12 rounds), and CVE-3 (replaces hardcoded credentials with cryptographically random keys). - Secure Coding Patterns: Provides ready-to-use implementations for Zod input validation, path traversal sanitization, and safe command execution via execFile without shell interpretation. - Agent Orchestration: Coordinates v3-security-architect, security-auditor, and test-architect agents in parallel for threat modeling, remediation, and TDD-based security testing. - Use Case: When upgrading a claude-flow v3 codebase, run this Skill to systematically eliminate known CVEs and enforce secure-by-default patterns across authentication, input handling, and subprocess execution. ## Quick Start Ask the AI to run the V3 security overhaul to fix the critical CVEs and apply secure coding patterns across the claude-flow v3 codebase.

Frequently Asked Questions about V3 Security Overhaul

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fix critical CVEs in claude-flow v3?▼

Run npm update for @anthropic-ai/claude-code to version 2.0.31 or higher and execute npm audit at the high level to resolve vulnerable dependencies. Then replace weak hashing and hardcoded credentials following the remediation patterns provided.

How to replace SHA-256 password hashing with bcrypt in Node.js?▼

Install the bcrypt package and hash passwords using bcrypt.hash(password, 12) with 12 salt rounds. This replaces insecure SHA-256 with hardcoded salts, providing adaptive hashing resistant to brute-force attacks.

How do I prevent path traversal attacks in Node.js?▼

Resolve the user-supplied path against an allowed prefix using path.resolve, then verify the resolved path still starts with the allowed prefix. Throw an error if the check fails to block directory escape attempts.

Does this Skill cover input validation for TypeScript?▼

Yes, it includes Zod schema validation patterns for TypeScript, defining typed schemas for task IDs, content length limits, and enumerated agent types. Invalid inputs are rejected before reaching business logic.

Why is execFile safer than exec for running commands?▼

execFile runs the target binary directly with an argument array and shell disabled, so user input is never interpreted as shell syntax. This eliminates shell injection risks that exist when passing interpolated strings to exec.

Related Skills

Explore More Software Engineering Skills→
armanzeroeightarmanzeroeight
29

dependency-audit

Audit project dependencies for known security vulnerabilities using package manager tools.

Community
Intermediate
armanzeroeightarmanzeroeight
29

image-security-scanner

Scan Docker images for vulnerabilities, outdated packages, and misconfigurations.

Community
Intermediate
cedrikingcedriking

V3 Security Overhaul

Remediate security flaws in claude-flow v3 with secure-by-default architectures.

Community
Advanced
LerianStudioLerianStudio
205

ops-security-audit

Automate infrastructure security audits with phased scanning and compliance mapping.

Official
Advanced