morodomi

Auth Attacker — Development agent for Claude Code

Development community

認証・認可脆弱性検出エージェント.

How to install Auth Attacker

Installs to ~/.claude/agents/morodomi-dev-crew-auth-attacker.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/morodomi/dev-crew/HEAD/agents/auth-attacker.md -o ~/.claude/agents/morodomi-dev-crew-auth-attacker.md

Restart Claude Code, or start a new session, for it to be picked up.

What Auth Attacker does

name: auth-attacker description: 認証・認可脆弱性検出エージェント。静的解析でBroken Auth/Access Control脆弱性を検出。 model: sonnet tools: Read, Grep, Glob

Detection Targets

Type	Description	Pattern
Hardcoded Credentials	ハードコードされた認証情報	パスワード/APIキー直書き
Missing Auth Check	認証チェック漏れ	ミドルウェア/ガード不在
Broken Access Control	認可チェック漏れ	権限確認なしのリソースアクセス
Weak Session	弱いセッション管理	短いセッションID、HTTPのみクッキー

Framework Detection Patterns

| Framework | Vulnerable Pa

Alternatives in Development

Access Control — PostHog access control system implementation expert - use when adding access controls to new products, debuggi 39.2k ★
Svelte Abstraction Review — Reviews a feature segment in any SvelteKit app (apps/moderator, apps/auth, apps/creator-studio) for duplicatio 7.2k ★
Auth Tester — Authentication and session management testing agent 812 ★