Find weak spots in your website's login flow.
What it does
Audits a website's authentication flow and produces a report of security findings with severity ratings and an overall verdict.
When to use it
Use before deploying an authentication flow, when investigating suspected token leaks or redirect issues, or when establishing a regression baseline.
How to use it
Give it a login URL; it probes the authentication flow and writes a structured findings.md report inside the RVF container.
What you provide
- the login URL
What you need · 5
The workflow requires browser-record to open its recorded session.
The workflow requires indexing the session in browser-sessions with the auth-probe tag for future comparisons.
Login credentials must come from a vaulted handle or interactive entry as alternative authentication paths; hardcoding them is forbidden.
Access · 1
This skill
the login site
Submits credentials to the login site