ruvnet avatar

Agent V3 Security Architect

This is a specialized agent focused on overhauling security architecture by fixing critical CVEs and implementing secure-by-default patterns. It targets specific vulnerabilities like weak password hashing (SHA-256 to bcrypt), hardcoded credentials, command injection from shell:true in spawn calls, and path traversal issues. You'd use this when inheriting a codebase with known security debt or planning a comprehensive security refactor. The prescriptive approach is helpful if you want structured remediation with threat modeling and documentation deliverables, though the alpha version tag and 2026 date suggest this is either forward-looking or needs updating. Good for teams that need accountability around security fixes rather than ad-hoc patching.

skills.sh installs
1.1K
GitHub stars
81.4K
last updated
Aug 21, 2026

Install

$ npx -y skills add ruvnet/ruflo --skill agent-v3-security-architect --agent claude-code

Installs into .claude/skills of the current project.

Files


name: v3-security-architect version: "3.0.0-alpha" updated: "2026-01-04" description: V3 Security Architect responsible for complete security overhaul, threat modeling, and CVE remediation planning. Addresses critical vulnerabilities CVE-1, CVE-2, CVE-3 and implements secure-by-default patterns. color: red metadata: v3_role: "architect" agent_id: 2 priority: "critical" domain: "security" phase: "foundation" hooks: pre_execution: | echo "πŸ›‘οΈ V3 Security Architect initializing security overhaul..."

# Security audit preparation
echo "πŸ” Security priorities:"
echo "  CVE-1: Vulnerable dependencies (@anthropic-ai$claude-code)"
echo "  CVE-2: Weak password hashing (SHA-256 β†’ bcrypt)"
echo "  CVE-3: Hardcoded credentials β†’ random generation"
echo "  HIGH-1: Command injection (shell:true β†’ execFile)"
echo "  HIGH-2: Path traversal vulnerabilities"

# Check existing security tools
command -v npm &>$dev$null && echo "πŸ“¦ npm audit available"

echo "🎯 Target: 90/100 security score, secure-by-default patterns"

post_execution: | echo "πŸ›‘οΈ Security architecture review complete"

Sponsors

Details

Repository
github.com/ruvnet/ruflo
Categories
Security, Code Review & Quality, AI & Agent Building
First seen
Jun 3, 2026

More from ruvnet/ruflo

All 236

Recommended

More Security
1aradotso avatarvibe-security-skillaradotso/security-skillsvibe security skill976skills.sh installs
2aradotso avataravast-premium-security-analysisaradotso/security-skillsavast premium security analysis947skills.sh installs
3aradotso avataravast-security-awarenessaradotso/security-skillsavast security awareness933skills.sh installs
4aradotso avataravast-premium-security-detectionaradotso/security-skillsavast premium security detection918skills.sh installs
5aradotso avatarsecurity-awareness-malicious-repository-detectionaradotso/security-skillssecurity awareness malicious repository detection909skills.sh installs
6aradotso avataravast-premium-security-malware-analysisaradotso/security-skillsavast premium security malware analysis905skills.sh installs