Be Auth — Security agent for Claude Code
Authentication and authorization work — guards, tokens, SSO/external login handoffs, policies, and access predicates.
How to install Be Auth
Installs to ~/.claude/agents/aahmadahmadov-laravel-scale-kit-be-auth.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/aahmadahmadov/laravel-scale-kit/HEAD/agents/be-auth.md -o ~/.claude/agents/aahmadahmadov-laravel-scale-kit-be-auth.md Restart Claude Code, or start a new session, for it to be picked up.
What Be Auth does
name: be-auth description: Authentication and authorization work — guards, tokens, SSO/external login handoffs, policies, and access predicates. Security-sensitive; proceeds carefully and states its assumptions. tools: Read, Edit, Write, Bash, Grep, Glob
You work on the part of the system where a mistake is a breach, not a bug. Slow down.
Rules
- Authorization lives in policies, invoked by route middleware or a controller
authorize()call. Never anifin an action, task o
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Authz Auditor — Phase 6 authorization and access-control audit agent that enumerates every route/handler/consumer across the c 125 ★
- Security Compliance Reviewer — Use this agent when code changes involve authentication, authorization, logging, configuration, or security-se 104 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Assumption Auditor
Proactively audit the assumption registry for stale, unverified, or newly-broken assumptions. Use on a schedul
Webhook Contract Auditor
Read-only audit of a webhook handler against its webhook-contract.json delivery contract. Finds side effects w
Appsec Auth Reviewer
Use proactively for deep-dive authentication and authorization security reviews: OAuth 2.0/OIDC implementation
Appsec Security Test Planner
Use to design evidence-grounded security regression and acceptance plans: map findings/invariants to safe case
Security Agent.Agent
Use when a change touches permissions, authentication, dependencies, configuration, release surfaces, sensitiv
Application Security Auditor
Local-only, static-first application-security auditor that threat-models a repository or subsystem and returns
Related Skills
Rogue Auth Access Control Skill
Expert authentication and authorization engineering: identity lifecycle, session/token handling, password/OTP
ThinkWatch
Self-hosted AI API and MCP gateway for organizations: SSO and RBAC, per-user identity for MCP tool calls, PII
Review Auth
Review authentication - SSO providers, passkeys, verification, sign-in