{"slug":"auth-flow-review","source_name":"auth-flow-review","name":"Auth Flow Review","description":"Reviews an authentication or session flow against the standard auth-weakness set — session fixation, missing rotation, weak reset tokens, JWT algorithm confusion, and unthrottled login. Use when auditing a login, session, JWT, or password-reset flow for security weaknesses.","version":1,"lift":{"pass_rate_delta_pts":null,"pass_rate_pct":42.9,"total_cases":14,"passed_cases":6,"tokens_delta_pct":421.2,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.5-flash","grading_method":"judged","completed_at":"2026-07-08T06:11:42.296157+00:00"},"skill_score":1,"benchmark_models":[{"model":"gemini-3.5-flash","headline":false,"delta_pts":null,"with_pass_pct":null,"without_pass_pct":null,"tokens_delta_pct":421.2,"turns_delta_pct":0,"total_cases":14,"cases_aggregated":14,"verdict":"mixed","never_hurt":true,"completed_at":"2026-07-08T06:11:42.296157+00:00","run_id":"79a903a9-a1f6-43c2-81c9-48060d80d2f5","latest_attempt":{"id":"79a903a9-a1f6-43c2-81c9-48060d80d2f5","runner_model":"gemini-3.5-flash","overall_verdict":"mixed","completed_at":"2026-07-08T06:11:42.296157+00:00","gate":"not_comparable"},"version_number":1,"is_latest_version":true,"gate":"not_comparable"}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":false},"license":null,"install_count":0,"total_uses":211,"total_users":5,"manifest_hash":"c1b7fc29e4660dfe6bd245cd6ccaab62d3cea0e8dd600a8ba9d1cf0a3038b697","install_name":"auth-flow-review","version_id":"c3bceeb0-8e75-4d58-a330-b2823801fcac","body_sha256":"81647a13cf373fe7eb11321610b14927c834ed1e8e7298a98560fb69c7534b3e","render_hash":"c4579f947ddcdecd169eb26b7fdea0428b2c83f62a2fbefe590c501877e0e97e","raw_url":"https://app.decimal.ai/s/auth-flow-review/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/auth-flow-review"}