audit-node-api-auth

Name: audit-node-api-auth
Availability: InStock
Author: Shan

Audit Node.js API routes for missing authentication and broken JWT verification.

1|Updated May 2, 2026

Search Tags:#security #api #jwt #middleware #rate-limiting #auth #node

Ready to run

npx skills add https://github.com/Shankulkarni/vibe-audit --skill audit-node-api-auth

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: audit-node-api-auth
Source: https://github.com/Shankulkarni/vibe-audit/tree/main/skills/audit-node-api-auth
Command: npx skills add https://github.com/Shankulkarni/vibe-audit --skill audit-node-api-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit Node.js API routes for missing auth, broken JWT verification, exposed admin endpoints, and missing rate limiting to prevent unauthorized access and abuse.

Core Features & Use Cases

Provides a structured audit checklist to identify unprotected routes, incorrect JWT verification, and missing rate limiting across popular Node.js frameworks (Express, Hono, Fastify, Koa, etc.).
Includes concrete remediation patterns, examples of dangerous auth gaps, and guidance on implementing proper middleware order, role checks, and secure defaults.
Suitable for AI-generated or scaffolded API codebases where security regressions commonly occur, enabling teams to harden critical data access paths.

Quick Start

Analyze a Node.js project to locate auth gaps, fix broken JWT verification, and apply rate limiting across routes.

Frequently Asked Questions about audit-node-api-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit Node.js API routes for missing authentication and JWT vulnerabilities?▼

To audit Node.js API routes for missing authentication, you can run a structured security audit that identifies unprotected endpoints, verifies correct JWT algorithms, and enforces proper middleware order to prevent unauthorized access.

What's the best way to secure admin endpoints in AI-generated Express or Fastify code?▼

Securing admin endpoints in AI-generated Express or Fastify code requires applying role checks and explicit JWT verification middleware to ensure only authorized users can access protected routes and sensitive data paths.

Does this authentication audit work with Hono and Koa frameworks?▼

Yes, this authentication audit supports Hono and Koa frameworks, applying a structured checklist to locate broken JWT verification, exposed admin endpoints, and missing rate limiting across various Node.js API implementations.

How do I fix broken JWT verification in Node.js API routes?▼

Fixing broken JWT verification in Node.js API routes involves enforcing explicit algorithm checks, correcting middleware order, and applying concrete remediation patterns to ensure tokens are validated properly before granting access.

How do I add rate limiting to scaffolded Node.js APIs to prevent abuse?▼

Adding rate limiting to scaffolded Node.js APIs requires applying middleware that restricts request volumes on protected routes, closing rate-limiting gaps that commonly occur in generated code to prevent unauthorized access and abuse.