Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

Auth Checker — measured AI agent skill | DecimalAI

sundial-org/auth-checker

NewSkillScoreMaintained

Audit authentication flows for security vulnerabilities

Securityby sundial-org

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

Security & AppSec pack

1 · One-time — install the CLI (docs ↗)

pip install decimalai

2 · Get the skill — writes .claude/skills/sundial-org-auth-checker/SKILL.md

decimalai skills pull sundial-org-auth-checker --out .claude/skills/

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/sundial-org-auth-checker/SKILL.md https://app.decimal.ai/s/sundial-org-auth-checker/SKILL.md

Raw file: /s/sundial-org-auth-checker/SKILL.md ↗ · machine-readable summary at /s/sundial-org-auth-checker.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

22 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 3h ago

Yes — +68% lift-35% tokens0% turns91% of whole cases pass with skill (20/22)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-13	✗→✓	▲ Improved	-64%	0%
case-03	✗→✓	▲ Improved	-13%	0%
case-18	✗→✓	▲ Improved	-60%	0%
case-07	✗→✓	▲ Improved	-36%	0%
case-09	✗→✓	▲ Improved	-56%	0%

Showing 5 of 22 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

sundial-org / awesome-openclaw-skills

skills/auth-checker/SKILL.md

View on GitHub ↗

Imported 8/3/2026Version v1

Skill contents

SKILL.md

Auth Checker

Scan your auth implementation for security holes. Catches the stuff that gets you hacked.

Quick Start

bash
npx ai-auth-check ./src/auth/

What It Does

Audits login/signup flows for vulnerabilities
Checks session management security
Identifies weak password policies
Flags insecure token handling

Usage Examples

bash
# Audit auth directory
npx ai-auth-check ./src/auth/

# Scan specific auth file
npx ai-auth-check ./src/lib/auth.ts

# Full project scan
npx ai-auth-check ./src --recursive

What It Catches

Hardcoded credentials
Missing rate limiting
Insecure session storage
JWT vulnerabilities
Missing CSRF protection
Weak password validation

Requirements

Node.js 18+. OPENAI_API_KEY required.

License

MIT. Free forever.

Built by LXGIC Studios

GitHub: github.com/lxgicstudios/ai-auth-check
Twitter: @lxgicstudios

Want to see if sundial-org/auth-checker would activate on your phrasing? Try it before you install — no LLM call, no signup.

Other measured skills in the registry, with their headline benchmark lift.