Auth & Security Code Reviewer

This skill empowers Claude to act as a security expert when reviewing code changes involving access control. It provides automated checklists for JWT validation, prevents critical vulnerabilities like token forwarding and algorithm confusion, and ensures strict adherence to modern standards like OAuth 2.1 and PKCE. It is particularly useful for developers building Model Context Protocol (MCP) servers or complex service-to-service architectures where secure token exchange and audience validation are paramount for preventing confused deputy attacks.

Key Features

Use Cases