skills.rest
vecear
vecearCOMMUNITY
Explore all skills by this author →
GitHub

auth-security-reviewer

Audit authentication and authorization implementations for session, JWT, CSRF, MFA, and access control flaws.

Updated Jan 21, 2026
Search Tags:#authorization#authentication#jwt#mfa#csrf#security-review#secure-coding
One-click install
npx skills add https://github.com/vecear/Nipponverb --skill auth-security-reviewer-vecear
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth-security-reviewer
Source: https://github.com/vecear/Nipponverb/tree/main/.claude/skills/auth-security-reviewer
Command: npx skills add https://github.com/vecear/Nipponverb --skill auth-security-reviewer-vecear

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security teams and developers gain a structured, actionable assessment of authentication and authorization implementations, identifying misconfigurations, vulnerabilities, and risk exposure.

Core Features & Use Cases

  • Session security and cookie handling review
  • JWT/token lifecycle, revocation, and exposure risk analysis
  • CSRF protection verification and mitigation recommendations
  • Password security assessment including hashing, salting, and breach checks
  • MFA configuration and fallback procedures
  • Access control and authorization checks across APIs
  • Security testing and remediation guidance for deployment pipelines

Quick Start

Provide a practical security review of the current authentication and authorization implementation and deliver actionable remediation recommendations.

Frequently Asked Questions about auth-security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a security review for authentication and authorization implementations?▼

A security review for authentication and authorization implementations audits session handling, access controls, and token security to identify misconfigurations and deliver actionable remediation steps with severity ratings.

What is JWT token lifecycle analysis and how does it identify exposure risks?▼

JWT token lifecycle analysis evaluates token generation, validation, and revocation procedures to detect session management flaws and exposure risks, providing concrete fixes to secure web and API stacks.

How do I verify CSRF protection and assess password hashing in my web application?▼

Verifying CSRF protection and assessing password hashing involves checking mitigation configurations and salting mechanisms, yielding a prioritized remediation checklist suitable for engineering teams.

Does this authentication security review cover MFA configuration and API rate limiting?▼

Yes, the authentication security review covers MFA fallback procedures and API rate limiting across the stack, auditing these controls to uncover vulnerability risks and suggest mitigation strategies.

What is the best way to audit access controls and session management flaws across APIs?▼

The best way to audit access controls and session management flaws is a structured assessment that checks authorization implementations across API stacks, delivering findings with severity ratings and remediation steps.

Related Skills

Explore More Software Engineering Skills→
vigoliumvigolium
965

audit-auth

Audit authentication source code for JWT, session, and OAuth vulnerabilities.

Official
Intermediate
gitgoodordietryinggitgoodordietrying
1

security-audit

Audit codebases and infrastructure for dependency vulnerabilities, secrets, and misconfigurations.

Community
Advanced
not-subhunot-subhu

security-scan

Orchestrate dependency audits, static application security testing, and privacy dataflow analysis.

Community
Advanced
AnsteorraAnsteorra
6

security-audit

Perform static and dynamic security audits on the KMP application.

Official
Advanced