agent-v3-security-architect

Agent skill for v3-security-architect - invoke with $agent-v3-security-architect

1.36x

Quality

11%

Does it follow best practices?

Impact

93%

1.36x

Average score across 3 eval scenarios

Securityby

Advisory

Suggest reviewing before use

Optimize this skill with Tessl

npx tessl skill review --optimize ./.agents/skills/agent-v3-security-architect/SKILL.md

Evaluation results

92%

51%

Security Architecture Documentation for FlowAgent Platform

Security architecture deliverables

Criteria

Without context

With context

SECURITY-ARCHITECTURE.md exists

100%

CVE-REMEDIATION-PLAN.md exists

100%

SECURE-PATTERNS.md exists

100%

THREAT-MODEL.md exists

100%

API layer domain covered

100%

60%

Authentication domain covered

100%

RBAC authorization domain

50%

100%

Encrypted agent communication

100%

Data protection domain covered

60%

90/100 security score target

100%

Test coverage target

100%

89%

12%

Fix Authentication Security in CloudOps API

Password hashing and credential security

Criteria

Without context

With context

bcrypt package used

100%

12 salt rounds

100%

No hardcoded password

100%

Random password generation

100%

SHA-256 removed

100%

Hardcoded salt removed

100%

Dependency version updated

100%

No default username hardcoded

100%

13%

Harden the DevTools File Manager Service

Command injection and path traversal prevention

Criteria

Without context

With context

execFile used

100%

shell:true removed

100%

Arguments as array

100%

path.resolve() used

100%

Prefix validation present

100%

Path traversal error thrown

100%

Zod input validation

100%

No string-interpolated commands

100%

Repository: ruvnet/claude-flow
Commit: 322b2ae

Evaluated: 29 days ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Security Architecture Documentation for FlowAgent Platform Fix Authentication Security in CloudOps API Harden the DevTools File Manager Service

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.