auth-sec

Route authentication and authorization testing tasks to appropriate sub-skills.

5|1|Updated Apr 20, 2026
One-click install
npx skills add https://github.com/Yliken/ai4 --skill auth-sec-yliken
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auth-sec
Source: https://github.com/Yliken/ai4/tree/main/skills/auth-sec
Command: npx skills add https://github.com/Yliken/ai4 --skill auth-sec-yliken

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Route authentication and authorization testing tasks to the appropriate sub-skills.

Core Features & Use Cases

  • Auth boundary assessment: identify where flows break - login, session, object authorization, or identity protocols (JWT, OAuth, SSO), and outline remediation paths.
  • Protocol-aware routing: map tests for OAuth, OIDC, SAML, CSRF, and CORS configurations to targeted Skill modules.
  • Structured evaluation flow: orchestrate a staged, layered auth testing workflow that escalates from basic to advanced topics as needed.

Quick Start

Begin by routing authentication and authorization questions to the appropriate sub-skills to assess login, session, and token flows.

Frequently Asked Questions about auth-sec

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test authentication and authorization boundaries across login flows?

Testing authentication and authorization boundaries involves identifying where login, session, and object-level access flows break, then routing those tests to targeted sub-skills. This maps issues across login boundaries and identity protocols to outline remediation paths.

What is the best way to structure OAuth and JWT security testing?

The best way to structure OAuth and JWT security testing is through a staged, layered workflow that escalates from basic to advanced topics. This skill classifies protocol-specific auth issues and maps them to targeted skill domains for structured evaluation.

Can I use this skill to assess CSRF and CORS configurations?

Yes, you can assess CSRF and CORS configurations using this skill. It applies protocol-aware routing to map tests for CSRF, CORS, OAuth, OIDC, and SAML configurations directly to targeted skill modules for evaluation.

How does session and object-level authorization testing work?

Session and object-level authorization testing works by classifying access control issues and mapping them to specific skill domains. The skill orchestrates a staged assessment workflow that escalates from basic login checks to advanced object-level access scenarios.

When do I need identity protocol testing for SSO and SAML?

You need identity protocol testing for SSO and SAML when assessing token flows and cross-domain authentication boundaries. This skill routes these protocol-specific tests to appropriate modules, guiding testers through relevant identity and session topics.