cyber-testing-api-authentication-weaknesses

name	cyber-testing-api-authentication-weaknesses
description	Tests API authentication mechanisms for weaknesses including broken token validation, missing authentication on endpoints, weak password policies, credential stuffing susceptibility, token leakage in URLs or logs, and session management flaws. The tester evaluates JWT implementation, API key handling, OAuth flows, and session token entropy to identify authentication bypasses. Maps to OWASP API2:20
hide	true

YURI skill adapter

Authoritative source: .claude/skills/cyber-testing-api-authentication-weaknesses/SKILL.md

Authoritative source SHA-256: 739cba896371943f139bba8c83cc7a4fbbe8308d1bb7fa1cc585b17d0aab90ad

Source class: cyber-armed

Before acting, read the authoritative source file above completely from beginning to end. If the governed source is absent, run node _SYSTEM/Scripts/skill-recall.mjs --show cyber-testing-api-authentication-weaknesses and read its complete verified output. Follow that source as the skill body; this adapter is a non-authoritative metadata-and-pointer projection.