authentication
Enables secure authentication and authorization processes, including JWT, OAuth2, and RBAC for user identity management.
Install this skill
Security score
The authentication skill was audited on Feb 21, 2026 and we found 21 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Fetch to external URL
| 381 | const tokenResponse = await fetch('https://provider.com/oauth/token', { |
Base64 decode operation
| 446 | from jose.utils import base64url_decode |
External URL reference
| 153 | server_metadata_url='https://accounts.google.com/.well-known/openid-configuration', |
External URL reference
| 187 | api_base_url='https://api.github.com/', |
External URL reference
| 305 | authorize_url='https://provider.com/oauth/authorize', |
External URL reference
| 307 | access_token_url='https://provider.com/oauth/token', |
External URL reference
| 366 | const authUrl = new URL('https://provider.com/oauth/authorize') |
External URL reference
| 381 | const tokenResponse = await fetch('https://provider.com/oauth/token', { |
External URL reference
| 412 | 'https://provider.com/oauth/token', |
External URL reference
| 435 | 'https://api.service.com/resource', |
External URL reference
| 514 | issuer="https://provider.com", |
External URL reference
| 572 | "iss": "https://api.yourdomain.com", # Issuer |
External URL reference
| 574 | "aud": ["https://api.yourdomain.com"], # Audience |
External URL reference
| 601 | audience=["https://api.yourdomain.com"], |
External URL reference
| 602 | issuer="https://api.yourdomain.com", |
External URL reference
| 1013 | server_url="http://localhost:8080/", |
External URL reference
| 1056 | - [OAuth 2.0 RFC 6749](https://datatracker.ietf.org/doc/html/rfc6749) |
External URL reference
| 1057 | - [OpenID Connect Core 1.0](https://openid.net/specs/openid-connect-core-1_0.html) |
External URL reference
| 1058 | - [JWT Best Practices RFC 8725](https://datatracker.ietf.org/doc/html/rfc8725) |
External URL reference
| 1059 | - [OWASP Authentication Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html) |
External URL reference
| 1060 | - [OWASP Session Management](https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html) |
Install this skill with one command
/learn @lobbi-docs/authentication