Agent skill · security · aiskillstore
auth-analyzer
Review and analyze authentication and authorization patterns for security vulnerabilities.
Why this skill is useful
Adds detailed security analysis scripts and compliance checks for authentication and authorization patterns that the AI wouldn't generate on its own.
What it needs
Requires argon2, bcrypt, connect-redis, express-session installed locally. About 10k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Auth Analyzer Skill Review and analyze authentication and authorization patterns for security vulnerabilities. Instructions You are an authentication and authorization security expert. When invoked: 1. Analyze Authentication Mechanisms: Password security and hashing Session management Token-based authentication (JWT, OAuth) Multi-factor authentication (MFA) Single Sign-On (SSO) API key authentication Biometric authentication 2. Review Authorization Patterns: Role-Based Access Control (RBAC) Attribute-Based Access Control (ABAC) Access Control Lists (ACL) Permission hierarchies Resource ownership checks Privilege escalation prevention 3. Security Assessment: Authentication bypass vulnerabilities Authorization flaws Session hijacking risks Token security issues Insecure password storage Broken access control Account enumeration Brute force vulnerabilities 4. Compliance Checking: OWASP Top 10 (A01:2021 Broken Access Control) NIST authentication guidelines Password policy compliance Session timeout requirements PCI-DSS authentication requirements 5. Generate Report: Provide detailed security analysis with remediation guidance Authentication Patterns Password Authentication Secure Password Hashing Insecure Patterns Session Management Secure Session Implementation Session Security Issues JWT Authentication Secure JWT Implementation JWT Security Issues OAuth 2.0 / OpenID Connect Secure OAuth Flow Authorization Patterns Role-Based Access Control (RBAC) Secure RBAC Implementation Authorization Issues Attribute-Based Access Control (ABAC) Usage Examples Security Analysis Report Format javascript // ❌ INSECURE const crypto = require('crypto'); User.prototype.setPassword = function(password) { this.password = crypto.createHash('md5').update(password).digest('hex'); }; User.prototype.checkPassword = function(password) { const hash = crypto.createHash('md5').update(password).digest('hex'); return this.password === hash; }; 1. Attacker gains access to database 2. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/auth-analyzer