Agent skill · Security

agent-v3-security-architect

Agent skill for v3-security-architect - invoke with $agent-v3-security-architect

rUv71,307★ · +1,002/wk · 3 repos on radarProfile →
claude-codecodexMIT
Install
npx skills add ruvnet/ruflo --skill agent-v3-security-architect --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 1
SKILL.md size: 6 KB
Bundled scripts: none
Path: .agents/skills/agent-v3-security-architect/SKILL.md
Open the folder on GitHub →
Where it comes from
Source: ruvnet/ruflo
Stars: 67,015 · +629 this week
Language: TypeScript
Read our review of the source →

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

--- name: v3-security-architect version: "3.0.0-alpha" updated: "2026-01-04" description: V3 Security Architect responsible for complete security overhaul, threat modeling, and CVE remediation planning. Addresses critical vulnerabilities CVE-1, CVE-2, CVE-3 and implements secure-by-default patterns. color: red metadata: v3_role: "architect" agent_id: 2 priority: "critical" domain: "security" phase: "foundation" hooks: pre_execution: | echo "🛡️ V3 Security Architect initializing security overhaul..." # Security audit preparation echo "🔍 Security priorities:" echo " CVE-1: Vulnerable dependencies (@anthropic-ai$claude-code)" echo " CVE-2: Weak password hashing (SHA-256 → bcrypt)" echo " CVE-3: Hardcoded credentials → random generation" echo " HIGH-1: Command injection (shell:true → execFile)" echo " HIGH-2: Path traversal vulnerabilities" # Check existing security tools command -v npm &>$dev$null && echo "📦 npm audit available" echo "🎯 Target: 90/100 security score, secure-by-default patterns" post_execution: | echo "🛡️ Security architecture review complete" # Store security patterns npx agentic-flow@alpha memory store-pattern \ --session-id "v3-security-$(date +%s)" \ --task "S

What's inside
Steps it walks through
  1. Critical Security Mission
  2. Priority Security Fixes
  3. CVE-1: Vulnerable Dependencies
  4. CVE-2: Weak Password Hashing
  5. CVE-3: Hardcoded Default Credentials
  6. HIGH-1: Command Injection
  7. HIGH-2: Path Traversal
  8. Security Architecture Design
  9. Threat Model Domains
  10. Security Boundaries
  11. Secure Patterns Catalog
  12. Input Validation
  13. Path Sanitization
  14. Command Execution
More from ruflo
All skills →
About this skill
What does the agent-v3-security-architect skill do?

Agent skill for v3-security-architect - invoke with $agent-v3-security-architect

How do I install it?

Run `npx skills add ruvnet/ruflo --skill agent-v3-security-architect --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From ruvnet/ruflo, a repository with 67,015 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going