auth-review

Review authentication and authorization designs for OAuth, JWT, and RBAC/ABAC vulnerabilities.

Updated Mar 12, 2026
One-click install
npx skills add https://github.com/AdeptMind/pr-emojis-in-slack --skill auth-review-adeptmind
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auth-review
Source: https://github.com/AdeptMind/pr-emojis-in-slack/tree/main/.claude/skills/security/auth-review
Command: npx skills add https://github.com/AdeptMind/pr-emojis-in-slack --skill auth-review-adeptmind

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in authentication and authorization mechanisms within a codebase, ensuring robust access control and preventing unauthorized access.

Core Features & Use Cases

  • Auth Mechanism Identification: Scans for and identifies various authentication methods like JWT, OAuth, sessions, and API keys.
  • Auth Flow Mapping: Traces the complete authentication and authorization process from login to access checks.
  • Vulnerability Assessment: Checks for common security flaws including weak token configurations, improper session management, hardcoded credentials, and authorization bypasses.
  • Use Case: A developer can use this Skill to audit a new authentication module, receiving a detailed report on potential security risks and remediation steps before deployment.

Quick Start

Use the auth-review skill to analyze the authentication and authorization mechanisms in the 'src/auth' directory.

Frequently Asked Questions about auth-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review JWT authentication flows for security vulnerabilities?

Reviewing JWT authentication flows involves tracing token expiration configurations and access checks to identify weak token setups and authorization bypasses. This Skill maps auth mechanisms and assesses privilege escalation risks to satisfy code audit requirements.

What is the best way to assess OAuth and RBAC implementations for privilege escalation risks?

Assessing OAuth and RBAC implementations requires analyzing role-based access controls and tracing authorization flows for privilege escalation risks. This Skill evaluates token configurations and maps access checks to detect improper session management and unauthorized access.

How do I audit an authentication module before deployment?

Auditing an authentication module requires scanning source code like 'src/auth' to identify mechanisms including OAuth, JWT, and API keys. This Skill generates detailed reports on potential security risks and remediation steps to ensure robust access control before deployment.

Can I check my codebase for hardcoded credentials and improper session management?

Checking your codebase for hardcoded credentials and improper session management is possible by analyzing authentication mechanisms and mapping auth flows. This Skill identifies common security flaws including weak token configurations and authorization bypasses during risk assessment.

Does this authentication review support ABAC alongside RBAC vulnerability assessments?

Authentication review supports both ABAC and RBAC vulnerability assessments by analyzing authorization designs and checking for privilege escalation risks. It evaluates access control implementations to ensure robust security engineering requirements are met during code audits.

How does mapping auth flows help identify authorization bypasses?

Mapping auth flows helps identify authorization bypasses by tracing the complete authentication and authorization process from login to access checks. This Skill analyzes token expiration and auth mechanisms to detect vulnerabilities in security implementations.