crypto-downgrade-detector
Crypto downgrade detector: harvests every weak-algorithm usage (MD5, SHA1, DES, 3DES, RC4, ECB, CBC, deprecated createCipher), modern alternatives (subtle.encrypt, bcrypt, argon2, scrypt, PBKDF2), JWT signing-config (hardcoded-secret vs asymmetric key), cert/key-generation calls, and patch/version-based crypto weakeners (ALLOW_WEAK, --harmony, legacy-crypto). LLM analyses each finding as downgradeable, deprecated, or acceptable and recommends minimum upgrade. Read-only. Audience: Senior. Trigger: /crypto-downgrade
Pinned to revision 29d23a8cf80e, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/crypto-downgrade-detector/SKILL.md
- skills/crypto-downgrade-detector/README.md
- skills/crypto-downgrade-detector/scripts/crypto-posture.ps1
Every link opens the file at its source, pinned to the revision this page describes.