auth-route-protection-checker

Route protection auditing scans your Next.js app routes, API routes, middleware, and server actions to identify missing authentication and authorization checks. The Skill analyzes your project structure, categorizes routes by protection level, and generates a comprehensive report showing gaps and recommended protections.

Role-based route protection implements access checks in server components, API routes, and server actions by analyzing your existing auth utilities and generating targeted code. The Skill produces protection patterns including role-based and permission-based checks tailored to your project's structure.

Yes. The Skill discovers your route files and middleware, categorizes them into public, authenticated, role-protected, and action-protected groups, then identifies which routes lack proper auth checks and suggest specific protections for each.

Server action protection involves adding auth guards to your server-side functions. The Skill analyzes your server actions, generates protection code with role and permission checks, and provides implementation patterns matched to your project's authentication setup.

Auth middleware gaps include missing checks in server components, unprotected API routes, and server actions without access controls. The Skill audits your middleware configuration and project routes to surface these gaps with concrete code recommendations.