About
The Checking Session Security skill provides an automated framework for auditing how web applications handle user sessions, identifying high-risk vulnerabilities such as session fixation, weak ID generation, and improper timeout configurations. It systematically reviews source code, middleware, and configuration files across various frameworks like Express, Django, and Spring to ensure compliance with security best practices. By evaluating cookie flags, rotation policies, and invalidation behaviors, it provides developers with a prioritized security report complete with actionable code examples for immediate remediation.
