skills.rest
Burburton
BurburtonCOMMUNITY
Explore all skills by this author →
GitHub

auth-and-permission-review

Identify authentication and authorization weaknesses across code, configurations, and APIs.

Updated Mar 22, 2026
Search Tags:#authorization#authentication#rbac#access-control#security-review#token-management#vulnerability-assessment
One-click install
npx skills add https://github.com/Burburton/amazing_agent_specialist --skill auth-and-permission-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth-and-permission-review
Source: https://github.com/Burburton/amazing_agent_specialist/tree/main/templates/pack/full/.opencode/skills/security/auth-and-permission-review
Command: npx skills add https://github.com/Burburton/amazing_agent_specialist --skill auth-and-permission-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires scripts, references, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Authentication and access control vulnerabilities can lead to credential leakage, privilege escalation, and unauthorized access. This Skill helps security teams systematically identify and remediate authentication and authorization weaknesses across code, configurations, and API boundaries.

Core Features & Use Cases

  • Comprehensive authentication and authorization review for code, APIs, and configurations
  • Step-by-step checks for token handling, session management, RBAC, and access control
  • Use cases include web apps with user roles, tokens, and protected resources to verify that gates align with security policies

Quick Start

Run the security review workflow against your project to generate a structured security report.

Frequently Asked Questions about auth-and-permission-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review authentication and access control vulnerabilities in my codebase?▼

An RBAC review validates role-based access control checks across protected resources, configurations, and API boundaries to verify security gates align with policies and prevent privilege escalation.

What does an authorization security review check for in token and session management?▼

An authorization security review checks token handling and session management to identify weaknesses in credential storage, validate expiration, and prevent unauthorized access through session exploitation.

Can I use this security review for web apps with user roles and protected resources?▼

Yes, this security review works for web apps with user roles, tokens, and protected resources, applying checks across code and APIs to verify access gates align with your security policies.

What's the best way to prevent credential leakage and privilege escalation in APIs?▼

The best way to prevent credential leakage and privilege escalation is systematically reviewing authentication boundaries across APIs, validating token management, and applying remediation guidance to harden defenses.

Related Skills

Explore More Software Engineering Skills→
haxlyshaxlys

k8s-security-policies

Generate and enforce Kubernetes NetworkPolicy, PodSecurityPolicy, and RBAC security policies.

Community
Advanced
adaptive-enforcement-labadaptive-enforcement-lab
3

risk-prioritization-framework-for-engineers

Prioritize vulnerability remediation using CVSS scores and decision trees.

Official
Advanced
huangwb8huangwb8
47

security-specialist

Identify and mitigate security risks through threat modeling and compliance checks.

Community
Advanced
Weihong-LiuWeihong-Liu
6

security-review

Audit code for OWASP Top 10 vulnerabilities, hardcoded secrets, and unsafe patterns.

Community
Advanced