What problem does it solve? Authentication and session flows often contain hidden accessibility barriers—blocked paste, inaccessible CAPTCHAs, silent timeouts, lost work after reauthentication—that lock users out of security-critical tasks. This Skill provides a structured, review-only audit methodology that identifies these barriers with evidence while preserving legitimate security objectives. ## Core Features & Use Cases - Comprehensive flow coverage: Audits sign-in, registration, password reset, MFA/OTP, CAPTCHA, account recovery, lockout, session expiry, and reauthentication states with defined transition modeling. - WCAG 2.2 mapping: Maps findings to specific criteria including 3.3.8 Accessible Authentication, 2.2.1 Timing Adjustable, and 1.3.5 Identify Input Purpose with issue-specific rationale. - Security-vs-barrier analysis: Separates justified security requirements (rate limiting, possession factors) from avoidable barriers (paste blocking, forced retyping) and proposes less exclusionary alternatives. - Use Case: A frontend team preparing a login redesign asks for an accessibility review; the Skill produces a structured report with severity-rated findings, redacted evidence, manual validation steps, and retest priorities. ## Quick Start Audit the sign-in, password reset, and session timeout flows in this repository for accessibility barriers and produce a WCAG 2.2 mapped findings report.
