V3 Security Overhaul

Run npm update to patch vulnerable dependencies and npm audit --audit-level high to detect remaining issues. This Skill automates CVE remediation by coordinating security agents that update packages, replace weak cryptography, and remove hardcoded credentials.

Replace crypto.createHash('sha256') calls with bcrypt.hash(password, 12) using the bcrypt npm package. Bcrypt applies 12 salt rounds and adaptive hashing, making brute-force attacks significantly harder than unsalted SHA-256.

Use Zod schemas to enforce strict types, string length limits, and enum constraints at runtime. The Skill defines schemas like z.object with uuid, max-length, and enum validators to reject malformed input before processing.

Yes, it includes a securePath function that resolves user-supplied paths against an allowed prefix and throws a SecurityError if the resolved path escapes the permitted directory. This blocks directory traversal attempts.

execFile runs commands without shell interpretation when shell is set to false, preventing shell injection from user-controlled arguments. The Skill uses execFile with argument arrays so user input cannot alter command structure.