security-review-owasp-transaction-authorization

What problem does it solve?

This Skill helps reviewers assess transaction authorization flows for weak identity proof, broken trust propagation, recovery bypasses, and privilege escalation risks.

Core Features & Use Cases

• Security Review Guidance: Evaluates code, configuration, tests, and documentation for account takeover, identity confusion, and authorization failures.
• Flow and Trust Boundary Analysis: Traces credentials, session-adjacent steps, step-up checks, and service-to-service identity context end to end.
• Finding Prioritization: Focuses on confirmed weaknesses with concrete evidence and separates them from review gaps when controls are not visible.
• Use Case: A reviewer can inspect authentication, recovery, and delegated action workflows to determine whether an attacker could impersonate another user or bypass a critical authorization step.

Quick Start

Ask this skill to review the relevant transaction authorization flow, component, or file set and return confirmed findings with evidence, review gaps, passed checks, and an overall assessment.