跳到正文
FunCoding

auth-sec

Entry P1 category router for authentication and authorization. Use when testing login flows, sessions, object authorization, JWT, OAuth, CORS, CSRF, and enterprise SSO weaknesses before any deeper auth topic skill.

Star
2,440
许可证
MIT
最近提交
2026年9月13日

skills/auth-sec/SKILL.md

在 GitHub 上查看

Authentication and Authorization Router

This is the routing entry point for authentication, sessions, and authorization boundaries.

Use it to decide whether the issue is mainly login mechanics, object-level authorization, browser trust boundaries, or identity protocols such as OAuth/JWT/SAML before going deeper.

When to Use

  • The target includes login, registration, password reset, 2FA, sessions, JWT, OAuth, or SSO
  • You suspect object authorization flaws, cross-tenant access, cross-origin reads, CSRF, or protocol misconfiguration
  • You need to decide whether to test authentication or authorization first

Skill Map

  1. First confirm the authentication model and session boundaries
  2. Then confirm object-level and function-level authorization
  3. Then move to token, cross-origin, and protocol details
  4. If enterprise federation exists, continue with OAuth, OIDC, or SAML topics

相似的 Skill

test-driven-development

OBobra/superpowers298k近 7 天新增 2,631 个 star

migrate-to-shoehorn

MAmattpocock/skills288k近 7 天新增 10,178 个 star

agent-runtime-gateway-smoke-test

AFaffaan-m/ECC278k近 7 天新增 4,046 个 star

精选

accessibility

审计 Web、iOS、Android 的无障碍合规,支持键盘导航与屏幕阅读器。

AFaffaan-m/ECC278k近 7 天新增 4,046 个 star

ai-regression-testing

AFaffaan-m/ECC278k近 7 天新增 4,046 个 star

官方

firecrawl-build-interact

FIfirecrawl/firecrawl191k近 7 天新增 2,010 个 star