Skills
.Work. You
Rest

cwe-306-missing-authentication

Official

Secure critical functions with proper auth.

Software Engineering#security#authentication#remediation#java#sast#cwe-306
AuthorDevelopersCoffee
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill addresses the critical security vulnerability of Missing Authentication for Critical Functions in Java applications, ensuring that sensitive operations are protected.

Core Features & Use Cases

  • Vulnerability Remediation: Identifies and fixes code patterns where critical functions lack proper authentication.
  • Secure Implementation: Provides a deterministic fix using Spring Security annotations like @PreAuthorize and @AuthenticationPrincipal.
  • Use Case: When a SAST tool flags a deleteUser endpoint as vulnerable due to missing authentication, this skill can be applied to automatically add the necessary role-based access control and user principal checks.

Quick Start

Use the cwe-306-missing-authentication skill to secure the critical function in the provided Java controller code.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: cwe-306-missing-authentication
Download link: https://github.com/DevelopersCoffee/java-cwe-security-skills/archive/main.zip#cwe-306-missing-authentication

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.