Does this skill provide automated security testing?

Yes, it implements a TDD London School security framework designed to achieve over 95% test coverage on all security-critical code paths.

Is this skill compatible with existing v3 projects?

Yes, it is designed to be integrated into existing claude-flow v3 projects to perform architecture-wide security upgrades and audit existing codebases.

Which specific vulnerabilities does this skill address?

The skill is specifically pre-configured to remediate CVE-1 (Vulnerable Dependencies), CVE-2 (Weak Password Hashing), and CVE-3 (Hardcoded Credentials) within the claude-flow ecosystem.

How does it prevent injection attacks?

It implements strict Zod input validation and utilizes safe command execution patterns that bypass shell interpretation, significantly reducing the risk of injection.

V3 Security Overhaul

Name: V3 Security Overhaul
Author: ruvnet

byruvnet

•

12,331

•

安全与测试

Hardens claude-flow v3 architectures by remediating critical vulnerabilities and implementing secure-by-default development patterns.

The V3 Security Overhaul skill provides a comprehensive framework for securing claude-flow v3 implementations against modern threats. It automates the remediation of critical CVEs related to vulnerable dependencies, weak hashing, and hardcoded credentials while establishing robust defensive patterns like Zod-based input validation and path sanitization. By orchestrating specialized security agents, this skill ensures that agentic workflows remain resilient, compliant, and protected against common attack vectors such as path traversal and command injection.

主要功能

01Implementation of Zod-schema validation for rigorous input and data enforcement

02Safe command execution patterns using non-shell execution methods

03Security-focused TDD framework implementation for high-coverage testing

0412,331 GitHub stars

05Automated remediation for critical CVEs including dependency updates and credential management

06Secure path sanitization logic to eliminate directory traversal vulnerabilities

使用场景

01Hardening enterprise-grade multi-agent swarms against malicious input

02Automating security audits and vulnerability patching in CI/CD pipelines

03Migrating legacy claude-flow projects to a secure-by-default v3 architecture

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add ruvnet/claude-flow v3-security-overhaul

For use in Claude.ai and ChatGPT

Download Skill