auth-checker

Review·Scanned 2/18/2026

This skill audits authentication flows and exposes a CLI (e.g., npx ai-auth-check ./src/auth/) for scanning project files. It instructs executing that CLI and requires OPENAI_API_KEY, implying local command execution plus use of an API key.

from clawhub.ai·vce7973d·1.1 KB·0 installs
Scanned from 1.0.2 at ce7973d · Transparency log ↗
$ vett add clawhub.ai/lxgicstudios/auth-checkerReview findings below

Auth Checker

Scan your auth implementation for security holes. Catches the stuff that gets you hacked.

Quick Start

npx ai-auth-check ./src/auth/

What It Does

  • Audits login/signup flows for vulnerabilities
  • Checks session management security
  • Identifies weak password policies
  • Flags insecure token handling

Usage Examples

# Audit auth directory
npx ai-auth-check ./src/auth/

# Scan specific auth file
npx ai-auth-check ./src/lib/auth.ts

# Full project scan
npx ai-auth-check ./src --recursive

What It Catches

  • Hardcoded credentials
  • Missing rate limiting
  • Insecure session storage
  • JWT vulnerabilities
  • Missing CSRF protection
  • Weak password validation

Requirements

Node.js 18+. OPENAI_API_KEY required.

License

MIT. Free forever.


Built by LXGIC Studios