[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71S4FCZCFKEY29EPNRBCFA6":3,"skill-same:01M71S4FCZCFKEY29EPNRBCFA6":61},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":35,"linkOnly":36,"markdownContent":37,"markdownBody":38,"frontMatter":39,"refName":40,"commitSha":41,"skillDirectory":42,"forksCount":43,"repositoryHtmlUrl":44,"repositoryHomepageUrl":6,"ownerHtmlUrl":45,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":46,"install":47,"resources":60},"01M71S4FCZCFKEY29EPNRBCFA6","V3 Security Overhaul",null,"Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.","manykarim\u002Frobotframework-agentguard","manykarim","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F61293164?v=4","01M71S15ZAXR15JHKM1N7BHT21","Many Kasiriha","01M71S160CWQXETSCYWXDVNYJ2",1,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmanykarim\u002Frobotframework-agentguard\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fv3-security-overhaul\u002FSKILL.md",[],[19,5,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34],"v3","security","implementation","for","addresses","complete","critical","security architecture","patterns","default","use","first","flow","cve","secure","architecture","2026-11-10 13:02:02",false,"---\nname: \"V3 Security Overhaul\"\ndescription: \"Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.\"\n---\n\n# V3 Security Overhaul\n\n## What This Skill Does\n\nOrchestrates comprehensive security overhaul for claude-flow v3, addressing critical vulnerabilities and establishing security-first development practices using specialized v3 security agents.\n\n## Quick Start\n\n```bash\n# Initialize V3 security domain (parallel)\nTask(\"Security architecture\", \"Design v3 threat model and security boundaries\", \"v3-security-architect\")\nTask(\"CVE remediation\", \"Fix CVE-1, CVE-2, CVE-3 critical vulnerabilities\", \"security-auditor\")\nTask(\"Security testing\", \"Implement TDD London School security framework\", \"test-architect\")\n```\n\n## Critical Security Fixes\n\n### CVE-1: Vulnerable Dependencies\n```bash\nnpm update @anthropic-ai\u002Fclaude-code@^2.0.31\nnpm audit --audit-level high\n```\n\n### CVE-2: Weak Password Hashing\n```typescript\n\u002F\u002F ❌ Old: SHA-256 with hardcoded salt\nconst hash = crypto.createHash('sha256').update(password + salt).digest('hex');\n\n\u002F\u002F ✅ New: bcrypt with 12 rounds\nimport bcrypt from 'bcrypt';\nconst hash = await bcrypt.hash(password, 12);\n```\n\n### CVE-3: Hardcoded Credentials\n```typescript\n\u002F\u002F ✅ Generate secure random credentials\nconst apiKey = crypto.randomBytes(32).toString('hex');\n```\n\n## Security Patterns\n\n### Input Validation (Zod)\n```typescript\nimport { z } from 'zod';\n\nconst TaskSchema = z.object({\n  taskId: z.string().uuid(),\n  content: z.string().max(10000),\n  agentType: z.enum(['security', 'core', 'integration'])\n});\n```\n\n### Path Sanitization\n```typescript\nfunction securePath(userPath: string, allowedPrefix: string): string {\n  const resolved = path.resolve(allowedPrefix, userPath);\n  if (!resolved.startsWith(path.resolve(allowedPrefix))) {\n    throw new SecurityError('Path traversal detected');\n  }\n  return resolved;\n}\n```\n\n### Safe Command Execution\n```typescript\nimport { execFile } from 'child_process';\n\n\u002F\u002F ✅ Safe: No shell interpretation\nconst { stdout } = await execFile('git', [userInput], { shell: false });\n```\n\n## Success Metrics\n\n- **Security Score**: 90\u002F100 (npm audit + custom scans)\n- **CVE Resolution**: 100% of critical vulnerabilities fixed\n- **Test Coverage**: >95% security-critical code\n- **Implementation**: All secure patterns documented and tested","# V3 Security Overhaul\n\n## What This Skill Does\n\nOrchestrates comprehensive security overhaul for claude-flow v3, addressing critical vulnerabilities and establishing security-first development practices using specialized v3 security agents.\n\n## Quick Start\n\n```bash\n# Initialize V3 security domain (parallel)\nTask(\"Security architecture\", \"Design v3 threat model and security boundaries\", \"v3-security-architect\")\nTask(\"CVE remediation\", \"Fix CVE-1, CVE-2, CVE-3 critical vulnerabilities\", \"security-auditor\")\nTask(\"Security testing\", \"Implement TDD London School security framework\", \"test-architect\")\n```\n\n## Critical Security Fixes\n\n### CVE-1: Vulnerable Dependencies\n```bash\nnpm update @anthropic-ai\u002Fclaude-code@^2.0.31\nnpm audit --audit-level high\n```\n\n### CVE-2: Weak Password Hashing\n```typescript\n\u002F\u002F ❌ Old: SHA-256 with hardcoded salt\nconst hash = crypto.createHash('sha256').update(password + salt).digest('hex');\n\n\u002F\u002F ✅ New: bcrypt with 12 rounds\nimport bcrypt from 'bcrypt';\nconst hash = await bcrypt.hash(password, 12);\n```\n\n### CVE-3: Hardcoded Credentials\n```typescript\n\u002F\u002F ✅ Generate secure random credentials\nconst apiKey = crypto.randomBytes(32).toString('hex');\n```\n\n## Security Patterns\n\n### Input Validation (Zod)\n```typescript\nimport { z } from 'zod';\n\nconst TaskSchema = z.object({\n  taskId: z.string().uuid(),\n  content: z.string().max(10000),\n  agentType: z.enum(['security', 'core', 'integration'])\n});\n```\n\n### Path Sanitization\n```typescript\nfunction securePath(userPath: string, allowedPrefix: string): string {\n  const resolved = path.resolve(allowedPrefix, userPath);\n  if (!resolved.startsWith(path.resolve(allowedPrefix))) {\n    throw new SecurityError('Path traversal detected');\n  }\n  return resolved;\n}\n```\n\n### Safe Command Execution\n```typescript\nimport { execFile } from 'child_process';\n\n\u002F\u002F ✅ Safe: No shell interpretation\nconst { stdout } = await execFile('git', [userInput], { shell: false });\n```\n\n## Success Metrics\n\n- **Security Score**: 90\u002F100 (npm audit + custom scans)\n- **CVE Resolution**: 100% of critical vulnerabilities fixed\n- **Test Coverage**: >95% security-critical code\n- **Implementation**: All secure patterns documented and tested",{"name":5,"description":7},"main","63caf799a0409377ce4fd434e24e9eac7c05c6fa",".claude\u002Fskills\u002Fv3-security-overhaul",0,"https:\u002F\u002Fgithub.com\u002Fmanykarim\u002Frobotframework-agentguard","https:\u002F\u002Fgithub.com\u002Fmanykarim","2026-07-27 14:20:37",{"source":8,"skillName":5,"commands":48,"prompt":58,"zipAvailable":59},[49,52,55],{"tool":50,"command":51},"npx","npx skills add manykarim\u002Frobotframework-agentguard --skill \"V3 Security Overhaul\"",{"tool":53,"command":54},"bunx","bunx skills add manykarim\u002Frobotframework-agentguard --skill \"V3 Security Overhaul\"",{"tool":56,"command":57},"pnpm","pnpm dlx skills add manykarim\u002Frobotframework-agentguard --skill \"V3 Security Overhaul\"","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmanykarim\u002Frobotframework-agentguard\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fv3-security-overhaul\u002FSKILL.md",true,[],[62,84,92,110,124,139],{"skillNo":63,"name":64,"nameZh":6,"description":65,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":66,"categories":67,"keywords":73,"publishedAt":35},"01M71S584X6G22VN1KZ42DZ33K","good-example","Demonstrate a minimal valid Agent Skill used by AgentGuard's own tests.","https:\u002F\u002Fgithub.com\u002Fmanykarim\u002Frobotframework-agentguard\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fskills\u002Fgood-skill\u002FSKILL.md",[68],{"categoryNo":69,"categoryName":70,"taxonomyType":71,"taxonomyTypeDesc":72},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[74,75,76,77,78,79,80,81,82,83],"good example","good","example","valid","agentguard","read","write","minimal","tests","agent skill",{"skillNo":85,"name":86,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":87,"categories":88,"keywords":89,"publishedAt":35},"01M71S55P2APRSAC0S9F5X556A","bad-example","https:\u002F\u002Fgithub.com\u002Fmanykarim\u002Frobotframework-agentguard\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fskills\u002Fbad-skill\u002FSKILL.md",[],[90,76,91,79],"bad","bad example",{"skillNo":93,"name":94,"nameZh":6,"description":95,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":96,"categories":97,"keywords":99,"publishedAt":35},"01M71S53FGWCB5XXX4QGW3RF4P","injection-skill","Demonstrates a prompt-injection payload embedded in the body.","https:\u002F\u002Fgithub.com\u002Fmanykarim\u002Frobotframework-agentguard\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fsecurity\u002Finjection-skill\u002FSKILL.md",[98],{"categoryNo":69,"categoryName":70,"taxonomyType":71,"taxonomyTypeDesc":72},[100,101,79,102,103,104,105,106,107,108,109],"injection skill","injection","payload","body","prompt","unknown","Bash","prompt-injection","author","embedded",{"skillNo":111,"name":112,"nameZh":6,"description":113,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":114,"categories":115,"keywords":117,"publishedAt":35},"01M71S518MA1JN7F1DZ5XVRH06","curl-pipe-skill","Skill whose installer script demonstrates the `curl ... | sh` antipattern.","https:\u002F\u002Fgithub.com\u002Fmanykarim\u002Frobotframework-agentguard\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fsecurity\u002Fcurl-pipe-skill\u002FSKILL.md",[116],{"categoryNo":69,"categoryName":70,"taxonomyType":71,"taxonomyTypeDesc":72},[118,119,120,121,122,105,106,108,123],"curl","pipe","curl pipe skill","installer","antipattern","script",{"skillNo":125,"name":126,"nameZh":6,"description":127,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":128,"categories":129,"keywords":131,"publishedAt":35},"01M71S4YYFE3HJKDEQR5Z944ZW","clean-skill","A minimal, well-formed skill used as the security-scanner happy path.","https:\u002F\u002Fgithub.com\u002Fmanykarim\u002Frobotframework-agentguard\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fsecurity\u002Fclean-skill\u002FSKILL.md",[130],{"categoryNo":69,"categoryName":70,"taxonomyType":71,"taxonomyTypeDesc":72},[132,133,78,134,81,135,136,137,20,79,138],"clean skill","clean","scanner","grep","true","as","path",{"skillNo":140,"name":141,"nameZh":6,"description":142,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":143,"categories":144,"keywords":145,"publishedAt":35},"01M71S4W60AZYGA57HJWYBQZMJ","rf-libdoc-search","Search Robot Framework library\u002Fresource\u002Fsuite documentation to find matching keywords for a use case. Use when asked to find keywords, search libdoc, match a use case to keywords, or scan multiple libraries\u002Fresources for relevant keywords.","https:\u002F\u002Fgithub.com\u002Fmanykarim\u002Frobotframework-agentguard\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fintegrations\u002Fskills\u002Frf-libdoc-search\u002FSKILL.md",[],[146,147,148,22,149,150,151,152,153,154,155,156,29,157,158,159,160,161],"search","rf libdoc search","case","resources","relevant","scan","libraries","documentation","robot","when","framework","match","library","suite","matching","find"]