V3 Security Overhaul
Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.
Profile →npx skills add ruvnet/ruflo --skill v3-security-overhaul --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# V3 Security Overhaul ## What This Skill Does Orchestrates comprehensive security overhaul for claude-flow v3, addressing critical vulnerabilities and establishing security-first development practices using specialized v3 security agents. ## Quick Start ```bash # Initialize V3 security domain (parallel) Task("Security architecture", "Design v3 threat model and security boundaries", "v3-security-architect") Task("CVE remediation", "Fix CVE-1, CVE-2, CVE-3 critical vulnerabilities", "security-auditor") Task("Security testing", "Implement TDD London School security framework", "test-architect") ``` ## Critical Security Fixes ### CVE-1: Vulnerable Dependencies ```bash npm update @anthropic-ai$claude-code@^2.0.31 npm audit --audit-level high ``` ### CVE-2: Weak Password Hashing ```typescript // ❌ Old: SHA-256 with hardcoded salt const hash = crypto.createHash('sha256').update(password + salt).digest('hex'); // ✅ New: bcrypt with 12 rounds import bcrypt from 'bcrypt'; const hash = await bcrypt.hash(password, 12); ``` ### CVE-3: Hardcoded Credentials ```typescript // ✅ Generate secure random credentials const apiKey = crypto.randomBytes(32).toString('hex'); ``` ## Security Patterns ### I
- What This Skill Does
- Quick Start
- Critical Security Fixes
- CVE-1: Vulnerable Dependencies
- CVE-2: Weak Password Hashing
- CVE-3: Hardcoded Credentials
- Security Patterns
- Input Validation (Zod)
- Path Sanitization
- Safe Command Execution
- Success Metrics
Initialize V3 security domain (parallel) npm update @anthropic-ai$claude-code@^2.0.31 npm audit --audit-level high
What does the V3 Security Overhaul skill do?
Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.
How do I install it?
Run `npx skills add ruvnet/ruflo --skill v3-security-overhaul --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From ruvnet/ruflo, a repository with 67,015 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.