Audit JWT, session, and OAuth2 authentication patterns for security vulnerabilities.
npx skills add https://github.com/fusengine/agents --skill auth-audit
Please help me install this Agent Skill. Skill: auth-audit Source: https://github.com/fusengine/agents/tree/main/plugins/security-expert/skills/auth-audit Command: npx skills add https://github.com/fusengine/agents --skill auth-audit
This Skill safeguards your applications by identifying critical security vulnerabilities in authentication and authorization mechanisms, preventing common attacks and data breaches.
Run the auth-audit skill to audit JWT and session authentication patterns.
High-intent search queries and answers about installing and using this skill.
To audit JWT authentication flows, the skill scans for insecure cryptographic choices, verifies secure signing algorithms, and checks token expiration to identify security vulnerabilities and adherence to best practices.
Checking OAuth2 implementations involves scanning for common anti-patterns across protocols, specifically verifying the secure implementation of PKCE and identifying insecure token storage to prevent data breaches.
Session management auditing detects insecure token storage by analyzing session patterns and lifecycle issues, pinpointing weak cryptographic choices and common anti-patterns that expose applications to attacks.
Yes, this security audit verifies secure password hashing implementation and detects token lifecycle issues, ensuring your authentication mechanisms adhere to security best practices and prevent common exploits.
Yes, you can scan your existing authentication system for weak cryptographic choices before deployment to ensure protocols like JWT and OAuth2 use strong signing algorithms and secure storage.
Prorise-coolAudit application code for OWASP vulnerabilities and secure authentication flows.
AI-SafeterAudit code, CI/CD pipelines, and deployments for DevSecOps security gaps.
salmanabdurrahmanAnalyze Android APK and AAB artifacts for security vulnerabilities.
AnsteorraPerform static and dynamic security audits on the KMP application.
