Awarexone

Axguard Auth — Development skill for Claude Code

Development community

AuthZ / IDOR / JWT / CSRF footgun hunt.

How to install Axguard Auth

Installs to ~/.claude/skills/awarexone-axguard-axguard-auth/SKILL.md

Terminal

mkdir -p ~/.claude/skills/awarexone-axguard-axguard-auth && curl -fsSL https://raw.githubusercontent.com/Awarexone/AXguard/HEAD/commands/axguard-auth.md -o ~/.claude/skills/awarexone-axguard-axguard-auth/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Axguard Auth does

description: AuthZ / IDOR / JWT / CSRF footgun hunt. Usage: /axguard-auth [path]

/axguard-auth

**Specialist:** Access Control Lead

Usage

/axguard-auth
/axguard-auth ./api

Focus

Object fetch by id without ownership/tenant scope (IDOR)
Sibling routes missing middleware
JWT alg=none / weak verification
CSRF protection disabled on cookie sessions

Steps

axguard scan → keep auth.* findings.
Map routes/handlers manually for ownership checks

Alternatives in Development

JWT Scan — JWT attack toolkit (offline) — alg:none forgery, RS256→HS256 algorithm confusion, weak-secret crack, static cl 4.5k ★
/hunt — Active vulnerability hunting on a target 1.8k ★
Offer Toolkit Skill — Full job-hunt Claude skill bundle — Job Description decoder + Resume builder (11 templates) + Behavioral Inter 335 ★