security-review-owasp-unvalidated-redirects-and-forwards

What problem does it solve?

This Skill helps reviewers find unsafe redirect and forward logic where attacker-controlled input can influence destination selection, trust boundaries, or privileged routing decisions.

Core Features & Use Cases

• Redirect and Forward Analysis: Traces how untrusted values flow into redirectors, forwards, route selectors, and similar sinks.
• Trust Boundary Review: Evaluates allowlists, canonicalization, validation timing, and object or parameter binding that affect exploitability.
• Security Review Workflow: Supports code, configuration, architecture, tests, and operational controls for login flows, callback handlers, post-action navigation, and other destination-based behaviors.

Quick Start

Use the security-review-owasp-unvalidated-redirects-and-forwards skill to review the provided files or flow for unsafe redirect targets and forwarding logic.