Applied Cryptography Expert
Guides an agent to give security-minded advice on TLS, encryption, hashing and key management
- Repository
- RightNow-AI/openfang
- Stars
- 18,243
- Licence
- Apache-2.0
- Files
- 1 file
What it does
This is a set of written instructions that makes the AI agent respond like a senior security engineer when you ask about encryption, TLS certificates, password hashing, digital signatures or key storage. Once installed, the agent steers you toward well-audited libraries and modern algorithms, and warns about common mistakes such as reusing nonces, using ECB mode, or comparing secrets with ordinary string equality. It only changes how the agent reasons and writes; it does not add new tools or access to your systems.
Great for
- Developers who want a sanity check on how they are using encryption, hashing or JWT signing
- Students learning applied cryptography who want principled guidance rather than hand-rolled examples
- Teams reviewing TLS or key management designs before implementation
Skip it if
- Production security sign-off: the skill is a text prompt with no testing or audit, so its advice must be verified by a qualified professional (it can be wrong or out of date)
- Implementing custom cryptographic code: the skill itself advises against this, so it offers little help for building new primitives
Try asking
- “Which should I use to hash user passwords, bcrypt or SHA-256? Show me a safe Argon2id example.”
- “Review my plan for encrypting customer data with envelope encryption and a KMS.”
- “Write a TLS 1.3 nginx config with forward secrecy and strong cipher suites.”
- “How do I safely compare HMAC signatures in Python to avoid timing attacks?”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.
crypto-expert.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip crypto-expert.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip crypto-expert.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Give concrete context such as language, framework and threat model so the advice is specific rather than generic.
- Ask the agent to explain trade-offs and cite the library documentation, then check those references yourself.
- Treat generated configuration and code as a draft to be reviewed and tested before deployment.
What's inside
- SKILL.md
Redistributed unmodified from RightNow-AI/openfang under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.