skills.rest
derbalimajd04-dot
derbalimajd04-dotCOMMUNITY
Explore all skills by this author →
GitHub

V3 Security Overhaul

Remediates critical CVEs and implements secure-by-default patterns for Codex-flow v3.

Updated Feb 17, 2026
Search Tags:#security#secure coding#npm audit#bcrypt#path traversal#zod validation#cve remediation
One-click install
npx skills add https://github.com/derbalimajd04-dot/al-wasat --skill v3-security-overhaul-derbalimajd04-dot
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: V3 Security Overhaul
Source: https://github.com/derbalimajd04-dot/al-wasat/tree/main/.agents/skills/v3-security-overhaul
Command: npx skills add https://github.com/derbalimajd04-dot/al-wasat --skill v3-security-overhaul-derbalimajd04-dot

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires bcrypt, zod.

What problem does it solve? Codex-flow v3 contains critical vulnerabilities including outdated dependencies, weak SHA-256 password hashing, and hardcoded credentials. This Skill orchestrates a comprehensive security overhaul to fix these CVEs and establish security-first development practices. ## Core Features & Use Cases - CVE Remediation: Fixes vulnerable dependencies (CVE-1), replaces SHA-256 with bcrypt password hashing (CVE-2), and eliminates hardcoded credentials with secure random generation (CVE-3). - Secure-by-Default Patterns: Provides Zod input validation schemas, path traversal sanitization, and safe command execution without shell interpretation. - Parallel Agent Orchestration: Coordinates v3-security-architect, security-auditor, and test-architect agents for threat modeling, remediation, and TDD security testing. - Use Case: When upgrading Codex-flow to v3, run this Skill to audit npm dependencies, migrate password hashing to bcrypt with 12 rounds, and validate all user inputs with Zod schemas before release. ## Quick Start Ask the AI to run the V3 security overhaul to fix CVE-1, CVE-2, and CVE-3 and apply secure input validation patterns across the codebase.

Frequently Asked Questions about V3 Security Overhaul

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fix critical CVEs in Codex-flow v3?▼

Run npm update for vulnerable dependencies like @anthropic-ai/Codex@^2.0.31, replace SHA-256 password hashing with bcrypt using 12 rounds, and generate credentials with crypto.randomBytes instead of hardcoding them.

How to replace SHA-256 password hashing with bcrypt in Node.js?▼

Install bcrypt and call bcrypt.hash(password, 12) to generate salted hashes with 12 rounds. This replaces insecure patterns like crypto.createHash('sha256') with hardcoded salts.

What is the safest way to validate user input in TypeScript?▼

Use Zod schemas to define strict types, such as z.string().uuid() for IDs and z.enum() for constrained values. Validation rejects malformed input before it reaches business logic.

Does this Skill prevent path traversal attacks?▼

Yes, it includes a securePath function that resolves user paths against an allowed prefix and throws a SecurityError if the resolved path escapes the permitted directory.

Why should I avoid shell execution with user input?▼

Shell interpretation allows command injection when user input is concatenated into commands. Use execFile with shell: false and pass arguments as an array to execute commands safely.

Related Skills

Explore More Software Engineering Skills→
gitgoodordietryinggitgoodordietrying
1

security-audit

Audit codebases and infrastructure for dependency vulnerabilities, secrets, and misconfigurations.

Community
Advanced
LLM-Dev-OpsLLM-Dev-Ops
1

V3 Security Overhaul

Audit and harden claude-flow v3 security architecture across CI/CD stages.

Official
Advanced
BrunoSantanaDeveloperBrunoSantanaDeveloper

vulnerability-scanner

Scan codebases for dependencies, secrets, and insecure patterns.

Community
Advanced
cenjiecenjie

penetration-testing

Identify and validate security vulnerabilities through simulated attacks on applications and networks.

Community
Advanced