What problem does it solve?
This Skill rigorously audits the L2C system's authentication processes and Role-Based Access Control (RBAC) to ensure secure login, correct role switching, protected routes, and strict API permission boundaries.
Core Features & Use Cases
- Authentication Flow Validation: Verifies successful login for all user roles across web and mini-program platforms.
- Route Protection Testing: Ensures unauthorized access attempts are correctly blocked and redirected.
- Permission Boundary Enforcement: Confirms that users can only access resources and perform actions permitted by their assigned role.
- Use Case: Before a new release, this Skill is automatically triggered to confirm that no security vulnerabilities have been introduced in the authentication or authorization layers.
Quick Start
Run the auth-security-audit skill to verify the login process for all four user roles.