auth-review

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in authentication and authorization mechanisms within a codebase, ensuring robust access control and preventing unauthorized access.

Core Features & Use Cases

• Auth Mechanism Identification: Scans for and identifies various authentication methods like JWT, OAuth, sessions, and API keys.
• Auth Flow Mapping: Traces the complete authentication and authorization process from login to access checks.
• Vulnerability Assessment: Checks for common security flaws including weak token configurations, improper session management, hardcoded credentials, and authorization bypasses.
• Use Case: A developer can use this Skill to audit a new authentication module, receiving a detailed report on potential security risks and remediation steps before deployment.

Quick Start

Use the auth-review skill to analyze the authentication and authorization mechanisms in the 'src/auth' directory.