Awarexone

Axguard Auth — Development skill for Claude Code

Development community

AuthZ / IDOR / JWT / CSRF footgun hunt.

How to install Axguard Auth

Installs to ~/.claude/skills/awarexone-axguard-axguard-auth/SKILL.md

Terminal

mkdir -p ~/.claude/skills/awarexone-axguard-axguard-auth && curl -fsSL https://raw.githubusercontent.com/Awarexone/AXguard/HEAD/commands/axguard-auth.md -o ~/.claude/skills/awarexone-axguard-axguard-auth/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Axguard Auth does

description: AuthZ / IDOR / JWT / CSRF footgun hunt. Usage: /axguard-auth [path]

/axguard-auth

**Specialist:** Access Control Lead

Usage

/axguard-auth
/axguard-auth ./api

Focus

Object fetch by id without ownership/tenant scope (IDOR)
Sibling routes missing middleware
JWT alg=none / weak verification
CSRF protection disabled on cookie sessions

Steps

axguard scan → keep auth.* findings.
Map routes/handlers manually for ownership checks

Alternatives in Development

JWT Scan — JWT attack toolkit (offline) — alg:none forgery, RS256→HS256 algorithm confusion, weak-secret crack, static cl 4.5k ★
Doctor — Environment diagnostics with interactive fixes — providers, auth, RTK, hooks, token optimization 2.8k ★
05 Env And Auth — Prompt 05: Environment Configuration & API Authentication 2.3k ★