Home / Skills / auth-access-control
auth-access-control
zhaji2333/CkSKILLSSkill
当出现注册/登录/找回密码/验证码/绑定手机/实名认证/OAuth/SSO/2FA/JWT等认证功能，前后端分离应用出现路由守卫/前端鉴权绕过，或发现ID可替换、角色参数可控、租户ID可控、接口存在越权迹象时调用。负责认证绕过、前端鉴权绕过、会话安全、验证码安全、水平/垂直越权、多租户隔离、密码重置、加密与随机性弱点分析。
Why this score
This repo hosts 10 skills, so its 122 stars are split between them (about 12 each) for scoring.
Popularity score: 55/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 482fe78a83ca, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneauth-access-control zhaji2333/CkSKILLS · Skill | 55 | ★ 122 | ≈46 always | 2mo ago |
| auth-security majiayu000/spellbook · Skill Both about auth and jwt | 63 | ★ 288 | ≈40 always | 16d ago |
| auth microsoft/apm · Skill Both about auth | 75 | ★ 4.0k | ≈20 always | 16d ago |
| auth-md fabricioctelles/skills · Skill Both about auth | 59 | ★ 114 | ≈26 always | 16d ago |
| add-auth JoviDeCroock/pracht · Skill Both about auth | 58 | ★ 99 | ≈21 always | 16d ago |
| api-auth-and-jwt-abuse yaklang/hack-skills · Skill Both about auth and jwt | 69 | ★ 2.5k | ≈46 always | 2mo ago |