cwe-330-weak-prng

Official

Secure Java random number generation.

AuthorDevelopersCoffee
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill addresses vulnerabilities arising from the use of insufficient or predictable random number generators in Java applications, enhancing the security of cryptographic operations and session management.

Core Features & Use Cases

  • Vulnerability Remediation: Identifies and fixes the use of java.util.Random or Math.random() in security-sensitive contexts.
  • Secure Randomness: Replaces insecure random number generation with java.security.SecureRandom.
  • Use Case: When SAST tools flag CWE-330, this Skill can be applied to automatically update the code to use SecureRandom for generating session tokens, API keys, or other critical security values.

Quick Start

Use the cwe-330-weak-prng skill to replace insecure random number generation with SecureRandom in the provided Java code.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: cwe-330-weak-prng
Download link: https://github.com/DevelopersCoffee/java-cwe-security-skills/archive/main.zip#cwe-330-weak-prng

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.