skills.rest
optimaxin
optimaxinCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

V3 Security Overhaul

Remediates critical CVEs and implements secure-by-default patterns for claude-flow v3.

Updated Jul 16, 2026
Search Tags:#security#npm audit#bcrypt#claude-flow#path traversal#zod validation#cve remediation
One-click install
npx skills add https://github.com/optimaxin/Tredev_Gems --skill v3-security-overhaul-optimaxin
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: V3 Security Overhaul
Source: https://github.com/optimaxin/Tredev_Gems/tree/main/.claude/skills/v3-security-overhaul
Command: npx skills add https://github.com/optimaxin/Tredev_Gems --skill v3-security-overhaul-optimaxin

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires bcrypt, zod.

What problem does it solve? It addresses critical security vulnerabilities in claude-flow v3, including vulnerable dependencies, weak password hashing, and hardcoded credentials, by orchestrating a structured security overhaul. ## Core Features & Use Cases - CVE Remediation: Fixes CVE-1 (vulnerable dependencies via npm audit), CVE-2 (replaces SHA-256 hashing with bcrypt at 12 rounds), and CVE-3 (replaces hardcoded credentials with crypto-generated random keys). - Secure Coding Patterns: Provides Zod-based input validation, path traversal sanitization, and safe command execution using execFile without shell interpretation. - Parallel Agent Orchestration: Coordinates v3-security-architect, security-auditor, and test-architect agents for threat modeling, remediation, and TDD security testing. - Use Case: When upgrading claude-flow to v3, run this overhaul to eliminate known CVEs and enforce security-first patterns across the codebase before release. ## Quick Start Ask the AI to run the v3 security overhaul to fix the critical CVEs and apply secure-by-default patterns across the claude-flow codebase.

Frequently Asked Questions about V3 Security Overhaul

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fix critical CVEs in claude-flow v3?▼

Run npm update for @anthropic-ai/claude-code to version 2.0.31 or higher, then run npm audit at the high level. Replace SHA-256 password hashing with bcrypt at 12 rounds and generate credentials using crypto.randomBytes.

How to replace weak password hashing with bcrypt in Node.js?▼

Replace SHA-256 hashing with hardcoded salts by importing bcrypt and calling bcrypt.hash with the password and 12 salt rounds. This addresses CVE-2 by providing adaptive, salted password hashing.

What input validation library does this security overhaul use?▼

It uses Zod for schema-based input validation, defining objects with constraints like UUID task IDs, maximum string lengths, and enumerated agent types. Invalid inputs are rejected before processing.

How do I prevent path traversal attacks in Node.js?▼

Resolve the user-supplied path against an allowed prefix using path.resolve, then verify the result still starts with the resolved allowed prefix. Throw a security error if the check fails.

Why use execFile instead of exec for command execution?▼

execFile runs commands without shell interpretation when shell is set to false, preventing shell injection from user-controlled arguments. exec passes input through a shell, which allows command injection.

Related Skills

Explore More Software Engineering Skills→
dennisonbertramdennisonbertram
1

npm-audit

Audit npm dependencies for known vulnerabilities and output JSON reports.

Community
Intermediate
LLM-Dev-OpsLLM-Dev-Ops
1

V3 Security Overhaul

Audit and harden claude-flow v3 security architecture across CI/CD stages.

Official
Advanced
inbharataiinbharatai
22

secret-scanner

Detect hardcoded secrets, API keys, and credentials in code repositories.

Community
Intermediate
rifh2000rifh2000

nydfs-expert

Map NYDFS 23 NYCRR 500 controls to a cybersecurity program blueprint.

Community
Advanced