security-review-owasp-authorization-testing-automation

What problem does it solve?

This Skill helps reviewers evaluate authorization testing automation for weaknesses that can lead to account takeover, privilege escalation, identity confusion, or unsafe trust propagation.

Core Features & Use Cases

• Identity and recovery review: Inspect enrollment, login, recovery, reset, and step-up flows for weak proofing or bypass paths.
• Trust-boundary analysis: Trace how identity and authorization context moves across services, jobs, headers, and delegated actions.
• Evidence-based findings: Produce review output grounded in code, configuration, tests, documentation, and observable behavior.
• Use Case: A security reviewer can use this skill to assess a login or recovery flow, confirm whether authorization decisions rely on client-controlled data, and document concrete remediation steps.

Quick Start

Ask Copilot to review the target authentication or authorization flow with this skill and focus on identity proof, recovery, propagation, and privilege enforcement.