sc-privilege-escalation

What problem does it solve?

Privilege escalation is a critical class of security risk where legitimate users or attackers can elevate access by manipulating roles, JWT claims, or admin endpoints. This Skill helps teams detect such vectors across code, configs, and deployment patterns.

Core Features & Use Cases

• Detects role manipulation via request bodies and API endpoints
• Validates server-side enforcement of RBAC and excludes client-trusted role data
• Identifies JWT role claim tampering and missing server-side checks
• Flags default/test admin accounts and insecure admin routes
• Provides remediation guidance and concrete test patterns

Quick Start

Run the sc-privilege-escalation scanner against your codebase to identify RBAC and JWT-based privilege weaknesses.