CtrlK
BlogDocsLog inGet started
Tessl Logo

auth-bypass

Hunt authentication/authorization bypass in route guards, role checks, tenant boundaries, and state-machine transitions.

61

Quality

72%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/standard/analyst/auth-bypass/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A tight, well-organized hunting playbook that respects token budget and includes a validation checkpoint. It would benefit from more executable testing technique per failure pattern.

Suggestions

For each failure pattern, add one concrete testing technique or example request (e.g., swapping a session token or tenant id) to lift actionability.

Number the workflow steps (enumerate targets → probe patterns → validate) to make the sequence explicit.

DimensionReasoningScore

Conciseness

Lean and efficient with no padding; every line earns its place and it assumes Claude's competence with terms like TOCTOU, MFA, and middleware.

5 / 5

Actionability

Concrete failure-pattern checklist ('Missing middleware on one route variant', 'TOCTOU between check and action') and a validation approach, but no executable code, commands, or specific testing techniques to actually exercise each pattern.

3 / 5

Workflow Clarity

A clear find→check→validate flow is implied by the Targets, Common failure patterns, and Validation sections, with an explicit positive/negative validation checkpoint; only explicit step ordering is missing.

4 / 5

Progressive Disclosure

Under 50 lines, single-purpose, with well-organized sections and no need for external references, so the simple-skill exception applies.

5 / 5

Total

17

/

20

Passed

Description

66%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A specific, well-targeted description that clearly conveys the skill's purpose and concrete hunting targets. Its main weakness is the absence of an explicit 'Use when...' trigger clause in the description itself.

Suggestions

Add a 'Use when ...' clause naming concrete trigger phrases (e.g., 'Use when auditing access control, privilege escalation, IDOR, or tenant-isolation bugs').

Include common synonyms such as 'privilege escalation', 'IDOR', and 'access control' to broaden natural trigger coverage.

DimensionReasoningScore

Specificity

Names the domain (auth/authorization bypass) and lists several concrete targets — 'route guards, role checks, tenant boundaries, and state-machine transitions' — leaving only minor coverage gaps.

4 / 5

Completeness

The 'what' is clear (hunt auth bypass in specific targets) but the description lacks any 'Use when...' clause, which caps completeness at 3 per the rubric.

3 / 5

Trigger Term Quality

Natural security-testing terms ('authentication/authorization bypass', 'route guards', 'role checks', 'tenant boundaries') are present, though common synonyms like IDOR or privilege escalation are missing.

4 / 5

Distinctiveness Conflict Risk

It carves a clear niche (auth-bypass hunting) with specific triggers, but has minor overlap risk with broader web-exploitation or pentest skills.

4 / 5

Total

15

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository
PurpleAILAB/Decepticon
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.