security-review-owasp-forgot-password
CommunityCatch password reset takeover risks
Software Engineering#owasp#access control#security review#password reset#account recovery#identity assurance
Authorsjinks
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill helps reviewers assess forgot-password and account recovery flows for account takeover, identity confusion, and privilege escalation risks against OWASP guidance.
Core Features & Use Cases
- Reviews recovery, reset, enrollment, and step-up flows across code, configuration, tests, and documentation.
- Checks identity proof, trust propagation, rate limiting, audit trails, and safe failure handling.
- Use it when validating a password reset flow, comparing fallback identity checks, or tracing how recovery actions affect sessions and authorization.
Quick Start
Use the security-review-owasp-forgot-password skill to review the password reset flow in the attached codebase and report confirmed weaknesses, review gaps, and passed checks.
Dependency Matrix
Required Modules
None requiredComponents
references
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: security-review-owasp-forgot-password Download link: https://github.com/sjinks/ai-owasp-skillset/archive/main.zip#security-review-owasp-forgot-password Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 536,000+ vetted skills library on demand.