Jamaalx

Auth Audit — Security skill for Claude Code

Security community

Full auth & session audit: login flow, session/cookie security, JWT handling, middleware safety, privilege escalation, MFA, audit logging, rate limiting.

How to install Auth Audit

Installs to ~/.claude/skills/jamaalx-claude-skills-auth-audit/SKILL.md

Terminal
mkdir -p ~/.claude/skills/jamaalx-claude-skills-auth-audit && curl -fsSL https://raw.githubusercontent.com/Jamaalx/claude-skills/HEAD/commands/auth-audit.md -o ~/.claude/skills/jamaalx-claude-skills-auth-audit/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Auth Audit does

description: "Full auth & session audit: login flow, session/cookie security, JWT handling, middleware safety, privilege escalation, MFA, audit logging, rate limiting. Generates AUTH-FIXES.md fix kit." allowed-tools: [Bash, Read, Glob, Grep, Edit, Write, Agent, WebSearch, WebFetch, TaskCreate, TaskUpdate, TaskGet, TaskList, "mcp__claude_ai_SupaBase__*"]

AUTH & SESSION SECURITY AUDIT

You are a senior application-security engineer performing a focused audit on the authentication, sessi

Alternatives in Security

  • Security Guardian — Comprehensive security analysis for RTK CLI tool, focusing on command injection, shell escaping, hook security 11.9k ★
  • Sanyuan Skills — Expert code review skill: SOLID, security, performance, error handling, boundary conditions 2.7k ★
  • MCP Security Checklist (SlowMist) — Comprehensive checklist: input validation, rate limiting, RBAC, credential management, container hardening 819 ★

Full documentation available on GitHub

View Source Repository

Related Skills

Secure LLM Gateway — Security skill for Claude Code

Secure LLM Gateway

Security-focused gateway in front of an LLM API — auth, prompt-injection defense, output filtering, audit logg

Security community
Skill Auditor Desktop — Security skill for Claude Code

Skill Auditor Desktop

Security audit skill for claude.ai / Claude Desktop — scans uploaded skills for prompt injection, data exfiltr

Security community
Arcjet Py — Security skill for Claude Code

Arcjet Py

Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data r

Security community
Auth Security UX Specialist — Security skill for Claude Code

Auth Security UX Specialist

Use when a login or security flow feels either unsafe or full of friction. Signup, password reset, 2FA and pas

Security community
Observability Crusade — Security skill for Claude Code

Observability Crusade

Unleash parallel Observability Purist agents to audit logging, tracing, metrics, and error handling across the

Security community
0x002132 Skills Bugbounty Hunt API Misconfig — Security skill for Claude Code

0x002132 Skills Bugbounty Hunt API Misconfig

Hunt API security misconfiguration — mass assignment, JWT attacks, prototype pollution, CORS, HTTP verb tamper

Security community

Related Agents

Auth Tester — Development agent for Claude Code

Auth Tester

Authentication and session management testing agent. Use for login bypass, session fixation, password reset fl

Development community
Kavach Config — Security agent for Claude Code

Kavach Config

KAVACH infrastructure/config/ops-security specialist. Audits security headers, debug/verbose in prod, stack-tr

Security community
Auth Route Debugger — Development agent for Claude Code

Auth Route Debugger

Use this agent when you need to debug authentication-related issues with API routes, including 401/403 errors,

Development community