auth-security-audit

Audit L2C authentication and RBAC across web and mini-program interfaces.

Updated Dec 1, 2025
One-click install
npx skills add https://github.com/Come0520/L2C --skill auth-security-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auth-security-audit
Source: https://github.com/Come0520/L2C/tree/main/.agent/skills/auth-security-audit
Command: npx skills add https://github.com/Come0520/L2C --skill auth-security-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill rigorously audits the L2C system's authentication processes and Role-Based Access Control (RBAC) to ensure secure login, correct role switching, protected routes, and strict API permission boundaries.

Core Features & Use Cases

  • Authentication Flow Validation: Verifies successful login for all user roles across web and mini-program platforms.
  • Route Protection Testing: Ensures unauthorized access attempts are correctly blocked and redirected.
  • Permission Boundary Enforcement: Confirms that users can only access resources and perform actions permitted by their assigned role.
  • Use Case: Before a new release, this Skill is automatically triggered to confirm that no security vulnerabilities have been introduced in the authentication or authorization layers.

Quick Start

Run the auth-security-audit skill to verify the login process for all four user roles.

Frequently Asked Questions about auth-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit authentication and RBAC mechanisms in an L2C system?

Auditing authentication and RBAC in an L2C system involves validating login flows, role switching, route protection, and API permission boundaries across web and mini-program interfaces to ensure secure access control.

What is role-based access control testing for web and mini-program platforms?

Role-based access control testing verifies that unauthorized access attempts are blocked and redirected, ensuring users can only access resources and perform actions permitted by their assigned role across web and mini-program platforms.

How to verify route protection and API permission boundaries before a release?

Verifying route protection and API permission boundaries before a release requires triggering an automated audit to confirm no security vulnerabilities have been introduced in the authentication or authorization layers.

Does this access control audit support login flow validation for all user roles?

Yes, this access control audit supports login flow validation by verifying successful login for all user roles across both web and mini-program platforms to ensure strict adherence to security protocols.

Can I use this security audit to check role switching and protected routes?

Yes, you can use this security audit to rigorously check role switching and protected routes, ensuring unauthorized access attempts are correctly blocked and redirected according to strict role-specific access rights.