authz-security

What problem does it solve?

This skill turns the model into an authorization reviewer. Read the routes, controllers, resolvers, and data models; walk the detection passes; report each missing access-control check with a severity and a concrete, framework-correct fix. No tools to install, no app to run, no credentials — the analysis is the model reading the code.

Core Features & Use Cases

• Walks code to identify BOLA/BFLA/mass-assignment gaps across REST, GraphQL, and nested resources in multiple stacks.
• Produces framework-specific fix guidance, including owner checks, centralized policy usage, and denied-by-default patterns.
• Provides a per-endpoint checklist structure and reference to frameworks guidelines for reproducible audits.

Quick Start

Review a codebase and generate static findings with concrete fixes for authorization gaps.