Auth Tester — Development agent for Claude Code
Authentication and session management testing agent.
How to install Auth Tester
Installs to ~/.claude/agents/h-mmer-pentest-agents-auth-tester.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/H-mmer/pentest-agents/HEAD/.claude/agents/auth-tester.md -o ~/.claude/agents/h-mmer-pentest-agents-auth-tester.md Restart Claude Code, or start a new session, for it to be picked up.
What Auth Tester does
name: auth-tester description: "Authentication and session management testing agent. Use for login bypass, session fixation, password reset flow abuse, MFA bypass, OAuth flaws, and privilege escalation testing. Provide the application URL and any credentials for testing." tools: Bash, Read, Write, Edit, WebFetch, Grep, mcp__writeup-search__search_writeups, mcp__writeup-search__get_writeup, mcp__writeup-search__search_techniques, mcp__writeup-search__search_payloads color: blue model: inherit
Alternatives in Development
- Cs Guardian — Customer success partner for account health, churn risk, renewals, escalations, and QBRs 1.3k ★
- Mailer Agent — Creates Action Mailer emails with previews, templates, and delivery tests following Rails conventions 652 ★
- Better Auth Expert — Use this agent when:\n\n1. After Better Auth Implementation Changes: Any time authentication-related code is m 434 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Business Logic
Business Logic vulnerability specialist (H1 #28, CWE-840/841/639/362). Use for testing workflow bypasses, pric
Auth Payment Agent
Deep-dive OAuth/OIDC, WebAuthn/FIDO2/passkeys, Apple/Google/Samsung Pay, IAP receipt validation, 3DS 2.x bypas
Auth Guard
Read-only reviewer for JWT login, password hashing, and /auth routes in this tracker. Use when the user asks t
Auth
NextAuth v5 expert for JWT, OAuth, and multi-tenant authentication
LinkedIn Login
Specialized agent for LinkedIn authentication using Playwright MCP server. Use proactively when LinkedIn login
Active Directory
Active Directory and Windows domain attack specialist. Use for Kerberoasting, AS-REP roasting, DCSync, BloodHo
Related Skills
Auth Audit
Full auth & session audit: login flow, session/cookie security, JWT handling, middleware safety, privilege esc
Spray
Password spray with hard guards — typed-hostname confirmation, lockout warning, audit log. Modes: http-form (c
Auth Security UX Specialist
Use when a login or security flow feels either unsafe or full of friction. Signup, password reset, 2FA and pas