skills.rest
fatihkan
fatihkanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

sc-privilege-escalation

Validate role-based access controls and admin endpoint protections for privilege escalation risks.

7|Updated Apr 9, 2026
Search Tags:#authorization#authentication#rbac#vulnerability-detection#privilege-escalation#code-scan#security-analysis
One-click install
npx skills add https://github.com/fatihkan/badi --skill sc-privilege-escalation-fatihkan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sc-privilege-escalation
Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-privilege-escalation
Command: npx skills add https://github.com/fatihkan/badi --skill sc-privilege-escalation-fatihkan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Privilege escalation vulnerabilities arise when users can elevate their access level through weak RBAC, misconfigured roles, or insecure token handling, leading to unauthorized actions and data exposure.

Core Features & Use Cases

  • Detects role manipulation via requests or misconfigurations in RBAC.
  • Validates authentication and authorization for critical admin endpoints.
  • Guides remediation with concrete verification steps and defensive patterns.

Quick Start

Run the sc-privilege-escalation check against your codebase to surface risky role handling practices.

Frequently Asked Questions about sc-privilege-escalation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect privilege escalation vulnerabilities in my web application?▼

To detect privilege escalation vulnerabilities, scan your codebase to identify weak RBAC implementations, misconfigured roles, and insecure token handling that allow users to elevate access levels.

What is RBAC circumvention and how does it impact security?▼

RBAC circumvention occurs when users bypass role-based access controls through role manipulation or misconfigurations, leading to unauthorized actions and severe data exposure across typical web app architectures.

How can I validate JWT role claims to prevent unauthorized access?▼

Validating JWT role claims involves checking server-side enforcement of roles and robust middleware to ensure tokens cannot be manipulated to escalate privileges or access critical admin endpoints.

What's the best way to secure admin endpoints against role manipulation?▼

Securing admin endpoints requires robust middleware, secure default accounts, and server-side role enforcement to validate authentication and authorization, preventing unauthorized privilege escalation.

Does this code scan verify remediation for weak role handling?▼

Yes, the code scan guides remediation with concrete verification steps and defensive patterns to confirm that server-side role enforcement and token handling issues are properly resolved.

Related Skills

Explore More Software Engineering Skills→
BIGSHOLBIGSHOL

verify-permissions

Validate RBAC configurations for tab access, button visibility, and permission checks.

Community
Intermediate
ersinkocersinkoc
56

sc-privilege-escalation

Detect privilege escalation vectors in RBAC and JWT-based applications.

Community
Advanced
scalekit-incscalekit-inc

implementing-scalekit-flask-auth

Integrate Scalekit OIDC/OAuth2 authentication and authorization into Flask apps.

Official
Advanced
jovermierjovermier
1

security-sentinel

Automate security auditing to identify vulnerabilities and OWASP Top 10 risks.

Community
Advanced