Stacks Documentation
SkillsChangelog
TeamSponsorsPartnersPostcardwareAwesome StacksContributing

Security

Copy page
Copy page as Markdown for LLMs
View as Markdown
View this page as plain text
Open in ChatGPT
Copy content and open ChatGPT
Open in Claude
Copy content and open Claude
Open in Perplexity
Search with Perplexity AI
On this page 5

stacks-security · Backend and API · model-invoked

The primitives underneath auth: password hashing, app key generation, AES encryption, hash verification and rehashing, plus the firewall, rate limit and IP allowlist configuration.

When to reach for it

  • Password hashing (bcrypt/argon2)
  • App key generation
  • AES encryption/decryption
  • Hash verification
  • Rehashing detection
  • Security configuration (firewall, rate limiting, IP allowlists)

Covers

@stacksjs/security, config/security.ts.

Inside the skill

The sections an agent reads once the skill loads.

  • Key Paths
  • Source Files
  • App Key Generation
  • Encryption / Decryption
  • Password Hashing
  • HashMakeOptions
  • config/hashing.ts
  • config/security.ts
  • Gotchas

Where the code lives

  • Core package: storage/framework/core/security/src/
  • Security config: config/security.ts
  • Hashing config: config/hashing.ts

Using it

This one is model-invoked. Your agent reaches for it on its own when the task matches, and you can also call it by name:

/stacks-security

Source: stacks-security/SKILL.md. Shadow it for one project with app/Skills/stacks-security/SKILL.md, then re-run buddy setup:ai. See Writing your own.