domains / families / security / sast-missingauth

sast-missingauth

authentic

Detect missing authentication and broken function-level authorization vulnerabilities in a codebase using a three-phase approach: recon (map endpoints and the role/permission system), batched verify (check auth/authz in parallel subagents, 3 endpoints each), and merge (consolidate batch results). Covers unauthenticated access and vertical privilege escalation (e.g., regular user accessing admin-only functions). Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/missingauth-results.md. Use when asked to find missing auth, broken access control, or privilege escalation bugs.

When to use

• missing authentication
• broken function-level authorization
• unauthenticated access
• vertical privilege escalation
• regular user accessing admin-only functions

When not to use

• IDOR
• Horizontal privilege escalation
• JWT weaknesses
• Business logic flaws

Skill page

Source