security-review-owasp-authorization-patterns

Community

Catch auth bypasses before release

Authorsjinks
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill helps reviewers find authorization and identity weaknesses that can lead to account takeover, privilege escalation, trust-boundary confusion, or broken recovery flows.

Core Features & Use Cases

  • End-to-End Review Guidance: Trace identity proof, credential handling, authorization decisions, and trust propagation across code, configuration, tests, and operational controls.
  • Risk-Focused Checklist: Evaluate recovery flows, step-up requirements, service-to-service identity context, logging, throttling, and failure handling with OWASP-based criteria.
  • Use Case: Use this Skill when reviewing authentication, account recovery, delegated access, or backend trust flows to separate confirmed weaknesses from missing evidence.

Quick Start

Ask the skill to review the relevant files, flow, or component for authorization patterns issues and report confirmed findings, review gaps, passed checks, and overall assessment.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: security-review-owasp-authorization-patterns
Download link: https://github.com/sjinks/ai-owasp-skillset/archive/main.zip#security-review-owasp-authorization-patterns

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 536,000+ vetted skills library on demand.