Auth Context — Security agent for Claude Code
Stores and validates authenticated test-account context for the active web-vuln tier.
How to install Auth Context
Installs to ~/.claude/agents/kennyalfredo-pr-agent-auth-context.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/agents/auth-context.md -o ~/.claude/agents/kennyalfredo-pr-agent-auth-context.md Restart Claude Code, or start a new session, for it to be picked up.
What Auth Context does
name: auth-context description: Stores and validates authenticated test-account context for the active web-vuln tier. Takes operator-pasted session material (cookies / bearer tokens / headers) for ONE OR TWO test accounts under an in-scope target, validates each is live with a single benign request via Burp, and writes it to /mnt/files/bb-agent//webvuln/auth/context.json (mode 0600, off-repo, never logged). Two accounts unlock IDOR/BOLA cross-account testing. Does NOT hunt, exploit, or
Alternatives in Security
- Vault Librarian — Run vault maintenance: detect orphan notes, find broken wikilinks, validate frontmatter completeness, flag sta 4.6k ★
- Bats Test Validator — Validates BATS test comprehensiveness and integrity for bash scripts 129 ★
- Release Auditor — Pre-release audit for a single plugin in the monorepo — takes a plugin slug and cross-references plugin.json v 72 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Webvuln Surface
Builds the TESTABLE request surface for the active web-vuln tier from an ingested program. Merges the passive
Harness Audit
Validates a hydrated repository against the current plugin and reports the drift between them. /harness:hydrat
Network Security Engineer
Network Security Engineer (Tier 3): hardens the network perimeter and runtime — TLS 1.3/HSTS/ACME, nginx/Caddy
Nosql Paradigm Auditor
Read-only NoSQL paradigm specialist. Use proactively during a database audit of document, key-value, or wide-c
Pipeline Founder Auditor
Growth-pipeline Agent 2. Use to audit a startup's founders' personal accounts — X/Twitter primary, LinkedIn se
Pipeline Social Auditor
Growth-pipeline Agent 1. Use to audit a startup's company-owned social accounts — Instagram, TikTok, X/Twitter
Related Skills
Auth Load
Store + validate authenticated test-account credentials for the active web-vuln tier. Paste session material (
Orbits Brief
Write a self-contained implementer brief for one chunk of an approved ORBITS plan — with the source material p
Paper Workbench
Build a visual, dyslexia-friendly paper editing workbench HTML file. Takes a paper (file or pasted text) plus