h0p3sf4ll

Auth Review Local — Security skill for Claude Code

Security community

Deep-dive auth security review using a local LM Studio model.

How to install Auth Review Local

Installs to ~/.claude/commands/h0p3sf4ll-threatlint-auth-review-local.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/commands/auth-review-local.md -o ~/.claude/commands/h0p3sf4ll-threatlint-auth-review-local.md

Restart Claude Code, or start a new session, for it to be picked up.

What Auth Review Local does

description: "Deep-dive auth security review using a local LM Studio model. OAuth, JWT, sessions, CSRF, MFA, RBAC, multi-tenancy. No API key required." argument-hint: "Optional: specific auth component or file (default: full auth system)"

Run an authentication and authorization security review using the local LM Studio model.

Steps

1. Verify LM Studio is reachable

curl -s http://localhost:1234/v1/models

If empty or unreachable, stop and tell the user to start the LM

Alternatives in Security

Azure Key Vault .net — Cryptographic key management 1.8k ★
MCP Security Checklist (SlowMist) — Comprehensive checklist: input validation, rate limiting, RBAC, credential management, container hardening 819 ★
ThinkWatch — Self-hosted AI API and MCP gateway for organizations: SSO and RBAC, per-user identity for MCP tool calls, PII 817 ★