skills.rest
CyberSecAI
CyberSecAIOFFICIAL
Explore all skills by this author →
GitHub

authentication-security

Identify authentication weaknesses using 49 ASVS-aligned rules.

1|Updated Aug 29, 2025
Search Tags:#security#authentication#code-review#MFA#ASVS#password-policy
One-click install
npx skills add https://github.com/CyberSecAI/genai-sec-agents --skill authentication-security-cybersecai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: authentication-security
Source: https://github.com/CyberSecAI/genai-sec-agents/tree/main/.claude/skills/authentication-security
Command: npx skills add https://github.com/CyberSecAI/genai-sec-agents --skill authentication-security-cybersecai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps security teams identify and remediate weaknesses in authentication implementations by applying bespoke ASVS-aligned rules, returning precise findings and secure code examples.

Core Features & Use Cases

  • Analyze authentication systems for login flows, session establishment, and credential handling
  • Validate MFA implementation and token verification
  • Enforce password policies and credential management
  • Issue guidance mapped to ASVS/CWE/OWASP references

Quick Start

Load the authentication-security rules from .claude/skills/authentication-security/rules.json and run a review on your target project.

Frequently Asked Questions about authentication-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review authentication code for ASVS compliance?▼

Review authentication code for ASVS compliance by applying 49 ASVS-aligned rules to login flows, MFA, password policies, and session handling. The analysis utilizes Semgrep and CodeQL to generate findings mapped to ASVS, CWE, and OWASP references.

What is the best way to detect MFA and session handling weaknesses?▼

Detect MFA and session handling weaknesses by analyzing authentication implementations using bespoke ASVS-aligned rules. This process validates token verification and session establishment across web applications and APIs to return precise findings.

Can I use Semgrep and CodeQL for password policy code review?▼

Yes, you can use Semgrep and CodeQL for password policy code review. The analysis applies manual detection patterns alongside these tools to enforce credential management and issue guidance mapped to ASVS, CWE, and OWASP references.

How do I run an authentication security review on my web application?▼

Run an authentication security review by loading the rules from .claude/skills/authentication-security/rules.json and executing a review on your target project. This identifies weaknesses in credential management and login flows.

Does this authentication analysis work for both web applications and APIs?▼

Yes, this authentication analysis works for both web applications and APIs. It evaluates login flows, session establishment, and credential handling, returning secure code examples to remediate identified weaknesses.

Related Skills

Explore More Software Engineering Skills→
giosuetedeschi-specgiosuetedeschi-spec

web-design-guidelines

Evaluate web interface code for compliance with design and accessibility standards.

Community
Intermediate
Claude-Code-Community-IrelandClaude-Code-Community-Ireland
10

Broken Authentication Testing

Test web applications for broken authentication and session management vulnerabilities.

Official
Advanced
89jobrien89jobrien
4

security-audit

Identify software codebase vulnerabilities and map findings to OWASP Top 10.

Community
Advanced
AnsteorraAnsteorra
6

security-audit

Perform static and dynamic security audits on the KMP application.

Official
Advanced