Устранение критических CVE и безопасная архитектура

security

v3-security-overhaul is a Claude Code skill that orchestrates a complete security architecture overhaul for claude-flow v3, resolving three critical vulnerabilities — CVE-1 (vulnerable dependencies), CVE-2 (weak SHA-256 password hashing), and CVE-3 (hardcoded credentials) — while establishing secure-by-default development practices. It spawns parallel agents: v3-security-architect designs the threat model and security boundaries, security-auditor patches the CVEs, and test-architect implements a London School TDD security framework. Core fixes include upgrading to bcrypt with 12 rounds, Zod-based input validation schemas, path traversal prevention via resolved-path checks, and shell-free command execution using execFile. Target outcomes are a Security Score of 90/100, 100% critical CVE resolution, and >95% test coverage of security-critical code. Ideal for teams performing a security audit and hardening refactor of an existing claude-flow v3 codebase.