auth-sec

Route authentication and authorization testing tasks to appropriate sub-skills.

5|1|Updated Apr 20, 2026
One-click install
npx skills add https://github.com/Yliken/ai4 --skill auth-sec-yliken
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth-sec
Source: https://github.com/Yliken/ai4/tree/main/skills/auth-sec
Command: npx skills add https://github.com/Yliken/ai4 --skill auth-sec-yliken

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Route authentication and authorization testing tasks to the appropriate sub-skills.

Core Features & Use Cases

  • Auth boundary assessment: identify where flows break - login, session, object authorization, or identity protocols (JWT, OAuth, SSO), and outline remediation paths.
  • Protocol-aware routing: map tests for OAuth, OIDC, SAML, CSRF, and CORS configurations to targeted Skill modules.
  • Structured evaluation flow: orchestrate a staged, layered auth testing workflow that escalates from basic to advanced topics as needed.

Quick Start

Begin by routing authentication and authorization questions to the appropriate sub-skills to assess login, session, and token flows.

Frequently Asked Questions about auth-sec

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test authentication and authorization boundaries across login flows?▼

Testing authentication and authorization boundaries involves identifying where login, session, and object-level access flows break, then routing those tests to targeted sub-skills. This maps issues across login boundaries and identity protocols to outline remediation paths.

What is the best way to structure OAuth and JWT security testing?▼

The best way to structure OAuth and JWT security testing is through a staged, layered workflow that escalates from basic to advanced topics. This skill classifies protocol-specific auth issues and maps them to targeted skill domains for structured evaluation.

Can I use this skill to assess CSRF and CORS configurations?▼

Yes, you can assess CSRF and CORS configurations using this skill. It applies protocol-aware routing to map tests for CSRF, CORS, OAuth, OIDC, and SAML configurations directly to targeted skill modules for evaluation.

How does session and object-level authorization testing work?▼

Session and object-level authorization testing works by classifying access control issues and mapping them to specific skill domains. The skill orchestrates a staged assessment workflow that escalates from basic login checks to advanced object-level access scenarios.

When do I need identity protocol testing for SSO and SAML?▼

You need identity protocol testing for SSO and SAML when assessing token flows and cross-domain authentication boundaries. This skill routes these protocol-specific tests to appropriate modules, guiding testers through relevant identity and session topics.