Detect authentication vulnerabilities in web applications and APIs.
npx skills add https://github.com/fatihkan/badi --skill sc-auth-fatihkan
Please help me install this Agent Skill. Skill: sc-auth Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-auth Command: npx skills add https://github.com/fatihkan/badi --skill sc-auth-fatihkan
Detect authentication vulnerabilities such as weak password policies, missing brute force protection, insecure password storage, authentication bypass, hardcoded credentials, insecure password reset flows, and missing multi-factor authentication across web apps, APIs, and services.
Run the scanner against your codebase to surface authentication flaws and get remediation guidance.
High-intent search queries and answers about installing and using this skill.
Detect authentication vulnerabilities by scanning your codebase to identify weak password policies, insecure password storage, and authentication bypass vectors. The scanner analyzes web apps and APIs to surface flaws and provides remediation guidance.
Yes, you can audit JWT and OAuth authentication models. The scanner applies broad coverage across session-based, JWT, OAuth, and API key models to identify token storage weaknesses and insecure token handling.
Brute force protection prevents automated password guessing by enforcing rate limiting. The scanner identifies missing brute force protection by analyzing authentication flows to detect absent rate limiting checks.
Check for insecure password reset flows and hardcoded credentials by running the scanner against your source code. It identifies vulnerable reset mechanisms and detects hardcoded credentials embedded in the codebase.
Yes, this authentication scanner works for API gateway security audits. Security teams use it to surface and remediate authentication flaws across services and APIs before release, ensuring API security standards are met.
Automated authentication vulnerability detection focuses on known weaknesses like weak hashing and missing multi-factor authentication. It may not identify complex business logic flaws or context-specific bypass vectors without defined patterns.
arvindbattulaEnforce secure coding practices for inputs, secrets, sessions, and integrations.
KILWA73Audit JWT handling, Argon2 hashing, and session management in authentication flows.
AndyAnh174Identify and exploit authentication and session management vulnerabilities in web applications.
securityfortechIdentify and exploit password reset workflow vulnerabilities using Burp Suite and OWASP ZAP.
