security-review-owasp-identity-propagation-patterns

What problem does it solve?

This Skill helps reviewers detect identity confusion, recovery bypasses, weak challenge flows, and privilege escalation risks in systems that move identity across users, services, and sessions.

Core Features & Use Cases

• End-to-end trust review: Trace how identity proof, credential handling, and authorization decisions flow through code, configuration, tests, and documentation.
• Attack-path focus: Prioritize account takeover, broken trust propagation, unsafe fallback paths, and client-controlled claims or headers.
• Review example: Use this Skill to assess a login, recovery, step-up, or service-to-service handoff and identify where an attacker could impersonate another user or gain unintended privileges.

Quick Start

Ask the skill to review the relevant identity flow, component, or files and return confirmed findings, review gaps, passed checks, and an overall assessment.