This is a specialized agent focused on overhauling security architecture by fixing critical CVEs and implementing secure-by-default patterns. It targets specific vulnerabilities like weak password hashing (SHA-256 to bcrypt), hardcoded credentials, command injection from shell:true in spawn calls, and path traversal issues. You'd use this when inheriting a codebase with known security debt or planning a comprehensive security refactor. The prescriptive approach is helpful if you want structured remediation with threat modeling and documentation deliverables, though the alpha version tag and 2026 date suggest this is either forward-looking or needs updating. Good for teams that need accountability around security fixes rather than ad-hoc patching.
npx skills add https://github.com/ruvnet/ruflo --skill agent-v3-security-architect