insufficient-randomness-anti-pattern

Features and purpose

Security anti-pattern for insufficient randomness vulnerabilities (CWE-330). Use when generating or reviewing code that creates security tokens, session IDs, encryption keys, nonces, or any security-critical random values. Detects use of Math.random() or predictable seeds.

Quick start

Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.