Detect authorization defects in route handlers, middleware, and ORM queries.
npx skills add https://github.com/gmcabrita/dotfiles --skill wrdn-authz-gmcabrita
Please help me install this Agent Skill. Skill: wrdn-authz Source: https://github.com/gmcabrita/dotfiles/tree/main/.agents/skills/wrdn-authz Command: npx skills add https://github.com/gmcabrita/dotfiles --skill wrdn-authz-gmcabrita
Detects authorization defects where the wrong principal, tenant, role, or scope boundary reaches protected data or actions.
Inspect a diff and surface candidate authorization bypasses with actionable traces and recommended remediations.
High-intent search queries and answers about installing and using this skill.
Detect IDOR and missing tenant scoping by analyzing route handlers, middleware, decorators, and ORM queries to surface authorization bypass patterns where the wrong principal reaches protected data, complete with file traces and fixes.
An authorization defect in route handlers and middleware occurs when the wrong principal, tenant, role, or scope boundary reaches protected data or actions due to missing ownership checks or fail-open permission validations.
Review RBAC and token-derived claims by analyzing resolvers, serializers, and token-derived claims across multiple frameworks to identify fail-open role checks and provide concrete remediations with severity estimates.
Yes, authorization analysis works with ORM queries and serializers across common frameworks, examining them alongside route handlers and middleware to identify boundary violations and provide structured file and line traces.
The best way to surface fail-open role and permission checks is to inspect code diffs by analyzing middleware, decorators, and resolvers to identify bypass patterns, generating severity estimates and concrete fixes to close authorization gaps.
getsentryTrace authorization paths to report permission boundary bypasses.
cschmatzlerDetect authorization defects in route handlers, middleware, and ORM queries.
LuisSambranoPerform systematic code review and static analysis across multiple programming languages.
cdalsoniiiGenerate and verify an authorization matrix for Go API endpoints.
