weak-password-hashing-anti-pattern

What problem does it solve?

This Skill addresses the critical security vulnerability of weak password hashing, which can lead to mass account compromise through rapid cracking of stored credentials.

Core Features & Use Cases

• Vulnerability Detection: Identifies the use of outdated or insecure hashing algorithms (MD5, SHA1, unsalted SHA256) for password storage.
• Secure Hashing Guidance: Recommends and provides examples for using modern, robust algorithms like bcrypt, Argon2, or scrypt with proper salting.
• Use Case: When reviewing user authentication code, this Skill helps ensure that passwords are not stored in a way that makes them easily crackable by attackers.

Quick Start

Review the current password hashing implementation for security vulnerabilities.