Scans code for security issues and generates a risk assessment report.
npx skills add https://github.com/descope/skills --skill auth-review-descope
Please help me install this Agent Skill. Skill: auth-review Source: https://github.com/descope/skills/tree/main/skills/auth-review Command: npx skills add https://github.com/descope/skills --skill auth-review-descope
Static, read-only security reviews of authentication and authorization in codebases, producing a structured triage report instead of scattered notes.
Run the static auth-review pass on the current repository to generate the triage report at ./auth-review/report-YYYY-MM-DD.md.
High-intent search queries and answers about installing and using this skill.
A static security review of authentication and authorization enumerates endpoints, constructs an authorization matrix mapping principals to enforced checks, and applies a vulnerability catalog to generate a triage-ready report.
An authorization matrix maps expected principals to the enforced access control checks across discovered endpoints, systematically surfacing missing or inconsistent authorization enforcement for security risk assessment.
Yes, the static analysis is framework- and vendor-agnostic, meaning it enumerates endpoints and evaluates access controls regardless of the specific authentication provider or web framework used.
Generate a triage-ready compliance report by running a read-only pass that applies a vulnerability catalog with CWE mappings to your codebase, outputting a structured markdown file summarizing findings and remediation guidance.
No, the authentication review is strictly static and read-only, meaning it analyzes the codebase without modifying source code and outputs all final artifacts to a designated directory.
Run a static auth review during pre-release hardening, post-incident reviews, or ongoing identity security assessments to proactively discover access control vulnerabilities before deployment.
BetaSAnalyze code repositories read-only to provide evidence-based insights.
ZateRoute injection, crypto, authentication, and configuration vulnerabilities to specialized remediation skills.
AnsteorraPerform static and dynamic security audits on the KMP application.
jinyimeng01Identify and validate WebSocket security weaknesses in real-time application channels.
