V3 Security Overhaul

This is a specialized security agent for claude-flow v3 that patches three critical CVEs and implements secure-by-default patterns. It migrates SHA-256 password hashing to bcrypt, removes hardcoded credentials, updates vulnerable dependencies, and adds input validation with Zod schemas. The skill orchestrates parallel security tasks using dedicated agents for threat modeling, CVE remediation, and TDD security testing. Worth noting that it includes practical examples for path traversal prevention and safe command execution without shell interpretation. If you're upgrading to v3 or inherited a codebase with known security debt, this gives you a structured framework to fix it systematically rather than piecemeal.

Install to Claude Code

npx -y skills add spencermarx/open-code-review --skill "V3 Security Overhaul" --agent claude-code