Individual skill

auth-agent

负责认证与会话类漏洞检测：认证绕过/暴力破解/会话管理/OAuth/SAML/ 密码重置绕过/验证码绕过/不安全随机数/用户枚举/OIDC/CSRF。 受控密码测试为条件执行：根据用户授权、测试账号情况、验证码类型和登录保护强度自主决策。 泄露的 JWT/密钥/硬编码凭据由 api-agent 验证，不在本 Agent 职责内。

agents/auth-agent/SKILL.md

Source commit 0b80fbf18d48d30950097c9531d6e05737901b51

What was checked

Matches the observed repository HEAD

Yes

Scanner rules are current

Yes

Repository scan complete

No

Skill scan complete

No

Observed behavior

Network or broad shell

Last checked

Nov 11, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.