Hunt Spa API
elementalsouls/Claude-BugHunter
Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.
当出现注册/登录/找回密码/验证码/绑定手机/实名认证/OAuth/SSO/2FA/JWT等认证功能，前后端分离应用出现路由守卫/前端鉴权绕过，或发现ID可替换、角色参数可控、租户ID可控、接口存在越权迹象时调用。负责认证绕过、前端鉴权绕过、会话安全、验证码安全、水平/垂直越权、多租户隔离、密码重置、加密与随机性弱点分析。
Install Auth Access Control
$ npx skills add zhaji2333/CkSKILLS --skill auth-access-control -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install zhaji2333/CkSKILLS auth-access-control --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/zhaji2333/CkSKILLS.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/auth-access-control .claude/skills/auth-access-control && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "auth-access-control" agent skill from https://github.com/zhaji2333/CkSKILLS/tree/main/.agents/skills/auth-access-control into .claude/skills/auth-access-control/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "auth-access-control", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/zhaji2333/CkSKILLS/tree/main/.agents/skills/auth-access-controlType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add zhaji2333/CkSKILLS --skill auth-access-control -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install zhaji2333/CkSKILLS auth-access-control --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/zhaji2333/CkSKILLS.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/auth-access-control .agents/skills/auth-access-control && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "auth-access-control" agent skill from https://github.com/zhaji2333/CkSKILLS/tree/main/.agents/skills/auth-access-control into .agents/skills/auth-access-control/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "auth-access-control", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add zhaji2333/CkSKILLS --skill auth-access-control -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install zhaji2333/CkSKILLS auth-access-control --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/zhaji2333/CkSKILLS.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/auth-access-control .cursor/skills/auth-access-control && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "auth-access-control" agent skill from https://github.com/zhaji2333/CkSKILLS/tree/main/.agents/skills/auth-access-control into .cursor/skills/auth-access-control/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "auth-access-control", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/zhaji2333/CkSKILLS.git --path .agents/skills/auth-access-control--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add zhaji2333/CkSKILLS --skill auth-access-control -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install zhaji2333/CkSKILLS auth-access-control --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/zhaji2333/CkSKILLS.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/auth-access-control .gemini/skills/auth-access-control && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "auth-access-control" agent skill from https://github.com/zhaji2333/CkSKILLS/tree/main/.agents/skills/auth-access-control into .gemini/skills/auth-access-control/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "auth-access-control", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install zhaji2333/CkSKILLS auth-access-controlInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add zhaji2333/CkSKILLS --skill auth-access-control -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/zhaji2333/CkSKILLS.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/auth-access-control .github/skills/auth-access-control && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "auth-access-control" agent skill from https://github.com/zhaji2333/CkSKILLS/tree/main/.agents/skills/auth-access-control into .github/skills/auth-access-control/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "auth-access-control", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add zhaji2333/CkSKILLS --skill auth-access-control -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install zhaji2333/CkSKILLS auth-access-control --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/zhaji2333/CkSKILLS.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/auth-access-control .opencode/skills/auth-access-control && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "auth-access-control" agent skill from https://github.com/zhaji2333/CkSKILLS/tree/main/.agents/skills/auth-access-control into .opencode/skills/auth-access-control/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "auth-access-control", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
auth-access-control- GitHub stars
- 114
- Token cost
- ~1.3k tokens
- SKILL.md length
- 361 words
- Files
- 1
- Skills in repo
- 15
- Repo updated
- First seen
- Licence
- MIT
At a glance
当出现注册/登录/找回密码/验证码/绑定手机/实名认证/OAuth/SSO/2FA/JWT等认证功能，前后端分离应用出现路由守卫/前端鉴权绕过，或发现ID可替换、角色参数可控、租户ID可控、接口存在越权迹象时调用。负责认证绕过、前端鉴权绕过、会话安全、验证码安全、水平/垂直越权、多租户隔离、密码重置、加密与随机性弱点分析。
- Works in 5 steps: 识别前端框架：查看 JS… → 提取路由表：从 router.js、JS… → 分析路由守卫逻辑：定位… → …
- Tasks that involve Authentication
- SKILL.md covers 何时调用（触发条件）, 一、身份认证与会话安全, 二、前端鉴权绕过 / 路由守卫绕过 and 三、验证码安全专项, plus 8 more sections
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Auth Access Control is an agent skill from zhaji2333/CkSKILLS. 当出现注册/登录/找回密码/验证码/绑定手机/实名认证/OAuth/SSO/2FA/JWT等认证功能，前后端分离应用出现路由守卫/前端鉴权绕过，或发现ID可替换、角色参数可控、租户ID可控、接口存在越权迹象时调用。负责认证绕过、前端鉴权绕过、会话安全、验证码安全、水平/垂直越权、多租户隔离、密码重置、加密与随机性弱点分析。
Its SKILL.md is about 1.3k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Backend & APIs, covering Authentication and Authorization and RBAC. It works with Vue.js. The repository describes itself as: 基于 Claude Code / Codex 的 SRC 漏洞挖掘 Agent 技能体系 —— 将顶尖安全研究员的方法论沉淀为可调度、可复用的 Skill 知识资产。 The licence is MIT.
When your agent uses it
- Tasks that involve Authentication
- Tasks that involve Authorization and RBAC
Example prompts
- “/auth-access-control”
Workflow steps
5 steps, taken from the first numbered list in SKILL.md.
- 识别前端框架：查看 JS bundle、路由库（vue-router、react-router-dom）、构建产物（webpack、vite、umi）。
- 提取路由表：从 router.js、JS map、反编译产物中提取所有路由路径，特别是 /admin、/manage、/console、/system 等管理路由（JS/source map 还原详见 recon-js-analysis）。
- 分析路由守卫逻辑：定位 beforeEach、onEnter、AuthGuard、PrivateRoute，确认校验依赖的是前端存储还是后端接口。
- 绕过验证：按 2.1 表格验证方法逐项执行；另测删除/篡改路由守卫 JS（Chrome Overrides、Burp 替换响应体）。
- 后端接口二次校验：即使绕过前端页面，也要测试对应 API 是否真正鉴权；前端绕过 ≠ 后端未授权，后者才是有效漏洞。
What it can do on your machine
Read from SKILL.md and the folder at commit 482fe78. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Auth Access Control loads about 1.3k tokens when it runs. Until then it costs about 46 tokens; SKILL.md has 361 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from zhaji2333/CkSKILLS at commit 482fe78, republished under its MIT licence (© zhaji2333). 361 words, ~1,264 tokens.
Download SKILL.mdSave it as
.claude/skills/auth-access-control/SKILL.md (or your agent's skills folder).- name
- auth-access-control
- description
- 当出现注册/登录/找回密码/验证码/绑定手机/实名认证/OAuth/SSO/2FA/JWT等认证功能，前后端分离应用出现路由守卫/前端鉴权绕过，或发现ID可替换、角色参数可控、租户ID可控、接口存在越权迹象时调用。负责认证绕过、前端鉴权绕过、会话安全、验证码安全、水平/垂直越权、多租户隔离、密码重置、加密与随机性弱点分析。
auth-access-control — 认证授权与越权专项深度挖掘
何时调用（触发条件）
- 注册/登录/找回密码/绑定换绑/实名认证/第三方登录/SSO/2FA 功能
- JWT/Token/Session 机制存在或可疑
- 发现对象ID可控（订单、用户、地址、收藏）
- 发现 role/admin/tenant_id 等参数可控
- 同一接口不同角色返回差异
- 加密/签名参数需要逆向分析（自研加密、弱哈希、可预测随机数；公网可取的 RSA/AES/uuid 当鉴权 →
unauth-path-key-hunt） - 前后端分离应用的路由守卫/前端鉴权（Vue/React 路由守卫、localStorage 登录态、前端 role 字段）
一、身份认证与会话安全
| 类型 | 场景 | 挖掘要点 |
|---|---|---|
| A1. 弱口令/默认口令 | 管理后台、运维面板、测试账号残留 | 字典策略、验证码绕过、MFA检查 |
| A2. 认证绕过 | 客户端校验、异常路径放行 | 不同header/cookie/参数组合对比 |
| A3. 会话固定/劫持 | 登录前后session不变 | Secure/HttpOnly/SameSite检查 |
| A4. JWT/Token风险 | 弱密钥、alg混淆、过期不校验 | token校验逻辑、重放测试 |
二、前端鉴权绕过 / 路由守卫绕过
适用场景：Vue / React / Angular 等前后端分离应用，前端通过
router.beforeEach、AuthGuard、本地 role 字段、localStorage/sessionStorage 中的登录态控制页面访问；服务端接口未做二次校验或校验可被绕过。
2.1 常见前端鉴权模式与绕过点
| 模式 | 绕过思路 | 验证方法 |
|---|---|---|
| 前端路由守卫（Vue Router / React Router） | 直接请求后端 API 或构造 URL 访问目标页，绕过守卫 | 拦截 /login 后的跳转，直接访问 /admin#/dashboard |
| localStorage/sessionStorage 存储登录态 | 修改/伪造 token、role、isAdmin 等字段 | 控制台 localStorage.setItem('role','admin') 后刷新 |
| 前端 role/admin 字段控制菜单/按钮 | 接口返回 role 字段，前端仅隐藏入口；直接调用后端管理接口 | 抓包改 role，观察后端是否真正校验 |
| JS 源码中硬编码角色/权限 | source map/解包后搜索 admin、role、permission | webpack/source map 还原、Chrome Sources 定位 |
| 路由异常路径 / Hash 模式差异 | 未定义路由、404、错误分支被放行；Hash 模式 #/admin 绕过服务端路径限制 | 对比 /admin 与 /#/admin；构造 #/admin/不存在路径 观察是否放行 |
2.2 挖掘步骤
- 识别前端框架：查看 JS bundle、路由库（vue-router、react-router-dom）、构建产物（webpack、vite、umi）。
- 提取路由表：从
router.js、JS map、反编译产物中提取所有路由路径，特别是/admin、/manage、/console、/system等管理路由（JS/source map 还原详见recon-js-analysis）。 - 分析路由守卫逻辑：定位
beforeEach、onEnter、AuthGuard、PrivateRoute，确认校验依赖的是前端存储还是后端接口。 - 绕过验证：按 2.1 表格验证方法逐项执行；另测删除/篡改路由守卫 JS（Chrome Overrides、Burp 替换响应体）。
- 后端接口二次校验：即使绕过前端页面，也要测试对应 API 是否真正鉴权；前端绕过 ≠ 后端未授权，后者才是有效漏洞。
三、验证码安全专项
适用场景：注册/登录/找回密码/绑定手机/敏感操作（改密/转账/提现）前的图片、短信、邮件、滑动/点选、行为验证码。
3.1 类型特有攻击面
| 类型 | 特有攻击点 |
|---|---|
| 图片验证码 | OCR 识别、干扰弱、时效长 |
| 短信/邮件验证码 | 轰炸（对他人手机号/邮箱无限发）、4-6 位短码可爆破、与接收渠道未绑定 |
| 滑动/点选验证码 | 轨迹伪造、拦截校验接口伪造 success=true / riskLevel=0 |
| 行为验证码（无感） | 设备指纹伪造、风控阈值宽松 |
3.2 通用绕过手法（所有类型先过一遍）
- 置空/删除参数：删掉
captcha/code字段或传空字符串 - 复用：同一验证码连续多次提交
- 不刷新：失败后用原验证码继续爆破
- 响应回显：验证码/结果在 JSON、Set-Cookie、响应头中返回
- 万能码：
000000/123456/888888/666666 - 并发：同时多发请求利用校验竞态
- 渠道未绑定：A 手机收码，B 手机提交同一验证码
- 可预测：短码 + 弱随机数（时间戳/递增/固定种子）
- 仅前端校验：JS 校验格式，服务端不校验
- 跳步：直接请求下一步接口绕过验证码环节
- 敏感操作确认：改密/转账前的验证码是否必需且服务端真正生效
3.3 修复建议
- 服务端生成 + 服务端校验，一次有效，用后即失效
- 验证码与接收渠道绑定（手机号/邮箱/图片 session）
- 短信码 ≥6 位 + 失败锁定 + 单号日发送上限；图片码加干扰/扭曲/时效
- 敏感操作验证码作为独立服务端校验步骤，不依赖前端
四、JWT/Token 专项
- 弱密钥爆破（
jwt_tool/ hashcat） - alg 混淆：
RS256→HS256，用公钥当私钥签名 - 过期 token 是否仍可用、注销是否失效
- 重放测试：同 token 多端使用、跨环境使用
- 签名算法是否强制校验（none 算法）
Show full SKILL.md (145 more words)Show less
五、访问控制与越权
| 类型 | 场景 | 挖掘要点 |
|---|---|---|
| B1. 水平越权（IDOR） | /order?id=xxx | 同角色不同用户资源ID替换 |
| B2. 垂直越权 | 管理接口未鉴权 | 对比管理员/用户接口差异 |
| B3. 多租户隔离失败 | tenantId可控 | 更换租户标识跨租户访问 |
权限验证三问（每次越权测试必答）
- 我是谁（认证）→ 身份是否可伪造
- 我能干什么（授权）→ 角色是否可篡改
- 我能操作哪个对象（对象级校验）→ 资源 ID 是否可替换
六、用户认证类场景表（全景）
| 场景 | 漏洞类型 | 挖掘要点 |
|---|---|---|
| 用户注册 | 批量注册/手机号遍历/邮箱轰炸 | 无验证码、验证码可绕过、无频率限制 |
| 用户登录 | 暴力破解/凭证泄露/登录绕过 | 无锁定机制、错误信息泄露用户存在性 |
| 密码找回 | 任意用户密码重置 | token可预测、验证码回显、用户凭证可控 |
| 短信/邮件验证码 | 验证码绕过/轰炸/回显 | 见「三、验证码安全专项」 |
| 手机号绑定/换绑 | 任意绑定/覆盖绑定 | 旧手机验证可绕过、直接绑定无验证 |
| 实名认证 | 绕过/伪造/信息泄露 | 前端校验、接口未验证、返回他人信息 |
| OAuth/第三方登录 | 账号劫持/绑定覆盖 | redirect_uri校验不严、state可预测 |
| SSO单点登录 | 票据伪造/会话固定 | ticket可重放、跨域token泄露 |
| 双因素认证(2FA) | 绕过/降级攻击 | 备用验证弱、可直接跳过2FA步骤 |
七、权限控制类场景表（全景）
| 场景 | 漏洞类型 | 挖掘要点 |
|---|---|---|
| 订单/交易详情 | 水平越权(IDOR) | 订单号遍历、无归属校验 |
| 个人信息/地址管理 | 越权查看/修改/删除 | ID可控、无用户绑定校验 |
| 后台管理接口 | 垂直越权/未授权访问 | 普通用户直接调用管理接口 |
| 角色/权限管理 | 越权提权 | role参数可控、权限ID可猜测 |
| 多租户系统 | 租户隔离失败 | tenant_id可控、跨租户访问 |
| 数据导出/报表 | 越权导出他人数据 | 导出范围可控、无权限过滤 |
| 批量操作接口 | 批量越权 | ids参数含他人资源ID |
| 审批/工作流 | 越权审批/跳过流程 | 直接修改审批状态、绕过前置节点 |
八、加密与随机性弱点（M类）
- 自研加密算法：逆向分析密钥、固定IV、可逆算法
- 弱哈希：MD5/SHA1 无盐、可预测随机数生成 token/验证码
- token/验证码可预测性：时间戳、递增序列、固定种子
- 加密参数篡改：修改密文中的用户ID/金额字段是否生效
- 取钥接口公网可打、加密只保护查询字不证明身份 →
unauth-path-key-hunt
九、挖掘步骤
- 收集凭证流转：注册→登录→找回密码→绑定→解绑，记录每个步骤的凭证传递
- 对比测试：A用户 token 访问 B用户资源；无 token/过期 token/伪 token 访问
- 角色篡改：注册时或请求中注入 role=admin / isAdmin=true / group_id
- 对象绑定：遍历资源 ID（订单号、用户ID、uuid），观察归属校验
- 租户切换：修改 tenant_id/org_id，验证跨租户访问
- 验证码专项：按「三、验证码安全专项」3.2 十一条手法逐项测试
- 密码重置链：验证码绕过 → token 预测 → 任意用户重置 → 登录目标账号
- OAuth/SSO：redirect_uri 白名单绕过、state 缺失/可预测、绑定覆盖
十、验证要点
- 响应差异：状态码、响应体字段、错误措辞（用户存在性枚举）
- 越权判定：能读到/改到他人数据即确认，无需深入
- 多用户矩阵：A↔B 双向测试，同角色/跨角色/跨租户
- 报告需标注：前置条件（登录态/角色/网络位置）、影响对象数量
十一、修复建议
- 服务端统一鉴权：每个接口强制校验身份与资源归属
- 对象ID不可预测（UUID）+ 归属校验（owner_id 比对）
- 验证码：见「三、验证码安全专项」3.3
- JWT：强密钥、强制算法白名单、短时效+撤销机制
- 密码重置 token：高熵随机、一次性、绑定会话
- 敏感操作（改密/绑手机/资金）增加二次验证
© zhaji2333, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in .agents/skills/auth-access-control of zhaji2333/CkSKILLS.
Open the folder on GitHubat commit 482fe78
Compare with similar skills
Auth Access Control next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Auth Access Control this skillzhaji2333/CkSKILLS | 114 | — | ~1.3k | Automated safety check: Pass | MIT | |
| Hunt Spa APIelementalsouls/Claude-BugHunter | 4.8k | — | ~2.2k | Automated safety check: Notes | MIT | |
| Cognitoitsmostafa/aws-agent-skills | 1.2k | 1 repos | ~2.3k | Automated safety check: Pass | MIT | |
| Auth Implementation Patternsynulihao/AgentSkillOS | 617 | 10 repos | ~4.4k | Automated safety check: Pass | None | |
| Configuration Cryptogreenpau/caddy-security | 2.3k | — | ~3.5k | Automated safety check: Pass | Apache-2.0 | |
| Passport Developmenttrypostit/trypost | 685 | — | ~1.9k | Automated safety check: Pass | MIT |
Similar skills
Cognito
itsmostafa/aws-agent-skills
AWS Cognito user authentication and authorization service. An agent skill from itsmostafa/aws-agent-skills.
Auth Implementation Patterns
ynulihao/AgentSkillOS
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems.
Configuration Crypto
greenpau/caddy-security
Configure portal/policy JWT keys, token names and lifetimes, key loading and generation, public-key discovery, and System API encryption keys.
Passport Development
trypostit/trypost
Develops OAuth2 API authentication with Laravel Passport. An agent skill from trypostit/trypost.
Spa Auth Development
gdarko/laravel-vue-starter
Activate when working on SPA authentication flow, Sanctum cookie-based auth, Vue Router guards, auth store, login/register/password reset pages, or CORS/session configuration.
More from zhaji2333/CkSKILLS
All 15 skills in this repoApk Reversing
zhaji2333/CkSKILLS
当需要获取目标 APK、识别加固壳类型、脱壳还原 dex、反编译得到 Java/so/H5 全量源码产物，或 android-security-audit 需要可直接开挖的输入时调用。负责 APK → 全量可审计产物（壳识别 → 脱壳 → JADX 反编译 + apktool 资源 + so 提取 + H5/assets 提取）→ 标准目录交付。命中场景：JADX 打开是…
Asc Fast Hunt
zhaji2333/CkSKILLS
当需要在不对 APK 全量反编译的前提下秒级定位硬编码密钥/签名函数/隐藏接口/调试后门，或 APK 过大（100MB）JADX 全量反编译过慢、内存吃紧，或脱壳产物（裸 dex）需要快速检索，或只想先读一下 Manifest 组件面/权限清单时调用。负责基于 Droid ASC 的零预处理快速定位（findrefs 全局交叉引用搜索 + getclass 按需反编译 + Manifest…
Business Logic Race
zhaji2333/CkSKILLS
当目标存在支付/下单/退款/提现/转账/优惠券/积分/红包/会员/订阅/审批/库存/抽奖等业务功能，或发现状态可跳变、金额参数可控、并发可重放时调用。负责业务状态机建模、金额篡改、订单状态跳变、竞态条件与重放攻击深度挖掘。
AI LLM Agent Security
zhaji2333/CkSKILLS
当目标为 LLM 应用/Chatbot/智能客服/AI 助手/Copilot/Agent/RAG 知识库/多模态模型，或发现用户输入进入大模型提示、工具调用、知识库检索、对话记忆、文件解析，或需要测试提示词注入/越狱逃逸/System Prompt 泄露/训练数据与敏感信息泄露/RAG 检索污染/Agent 记忆污染/工具滥用与命令执行/SSRF/沙箱逃逸时调用。负责 OWASP LLM…
Hunt Clueboard
zhaji2333/CkSKILLS
当开始挖新目标、换会话/压缩后续挖、用户说线索板/写板/读板/建板，或信息收集、反编译、JS/接口线索需要跨轮保留时调用。负责为当前系统维护一份 Markdown 线索板（读→挖→写回），不负责拆 webpack、打越权或成稿。模板见同目录 CLUEBOARD.template.md。
Cloud Infra Supply Chain
zhaji2333/CkSKILLS
当目标涉及云资产（对象存储/云元数据/Serverless）、容器/K8s、运维面板（宝塔/Grafana/Zabbix/Jenkins/GitLab/Nacos等）、消息队列/缓存中间件、CI/CD流水线、第三方回调集成、依赖组件CVE、信息泄露配置时调用。负责未授权访问、弱口令、云配置错误、供应链漏洞与敏感信息挖掘。
Related
Works with
Categories
Questions about Auth Access Control
What does Auth Access Control do?
当出现注册/登录/找回密码/验证码/绑定手机/实名认证/OAuth/SSO/2FA/JWT等认证功能，前后端分离应用出现路由守卫/前端鉴权绕过，或发现ID可替换、角色参数可控、租户ID可控、接口存在越权迹象时调用。负责认证绕过、前端鉴权绕过、会话安全、验证码安全、水平/垂直越权、多租户隔离、密码重置、加密与随机性弱点分析。. Auth Access Control is an agent skill from zhaji2333/CkSKILLS.
When should I use Auth Access Control?
Auth Access Control fits situations like: tasks that involve Authentication; tasks that involve Authorization and RBAC.
How do I install Auth Access Control in Claude Code?
Run `npx skills add zhaji2333/CkSKILLS --skill auth-access-control -a claude-code`. Or copy the skill folder (.agents/skills/auth-access-control in zhaji2333/CkSKILLS) into .claude/skills/auth-access-control in your project. Claude Code loads it when a task matches its description.
How do I install Auth Access Control in Codex?
Run `npx skills add zhaji2333/CkSKILLS --skill auth-access-control -a codex`. Or copy the skill folder (.agents/skills/auth-access-control in zhaji2333/CkSKILLS) into .agents/skills/auth-access-control in your project. Codex loads it when a task matches its description.
Can I use Auth Access Control in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add zhaji2333/CkSKILLS --skill auth-access-control -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/auth-access-control, .gemini/skills/auth-access-control, .github/skills/auth-access-control and .opencode/skills/auth-access-control in your project.
What does Auth Access Control need to run?
SKILL.md names no scripts, command-line tools or credentials: Auth Access Control is instructions for the agent only.
Does Auth Access Control access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Auth Access Control safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Auth Access Control use?
Auth Access Control is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Auth Access Control use?
About 1.3k tokens (SKILL.md is roughly 5.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Auth Access Control?
Skills that share tags, products or a category with Auth Access Control: Hunt Spa API (elementalsouls/Claude-BugHunter, 4.8k stars), Cognito (itsmostafa/aws-agent-skills, 1.2k stars), Auth Implementation Patterns (ynulihao/AgentSkillOS, 617 stars) and Configuration Crypto (greenpau/caddy-security, 2.3k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Auth Access Control?
zhaji2333 (a GitHub user) maintains it in zhaji2333/CkSKILLS, which has 114 GitHub stars. The repository holds 15 skills in this directory. The repository was last updated on September 15, 2026.
Source: zhaji2333/CkSKILLS on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.