Menu
Use when changing the router's authentication or authorization — JWT/OAuth modes, verifiers, resource/audience metadata, the secure-by-default bind guard, or the no-token-passthrough boundary.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Use when `make ci-local` fails locally or a GitHub Actions run reports a CI failure (format, lint, line-budget, typecheck, or test errors).
Use when reviewing a diff, PR, or change set for correctness and quality before merge or handoff. For a deep security-only pass, use security-review instead.
Use when bringing this repo into compliance with a GeneFoundry fleet standard (tool-naming, response-envelope, container-hardening, versioning, MCP transport, or logging) or closing its tracking issue.
Use when preparing to tag, publish, or deploy a genefoundry-router build.
Use when reviewing genefoundry-router security before deploy, when touching auth/proxy/logging/limits config, or when answering an infosec/DSB question.
Use when adding, removing, enabling/disabling, or reconfiguring a backend in the router's servers.yaml registry (URLs, namespaces, entrypoints, server_name/transform overrides).
| name | auth-change |
| description | Use when changing the router's authentication or authorization — JWT/OAuth modes, verifiers, resource/audience metadata, the secure-by-default bind guard, or the no-token-passthrough boundary. |
Follow AGENTS.md first. Auth is the router's trust boundary; ground in docs/SECURITY-ASSESSMENT-2026-06-29.md and the MCP authorization spec.
auth.py (verifiers/modes), config.py (GF_AUTH_MODE, GF_ALLOW_INSECURE, JWT/OAuth settings), and cli.py (bind guard) as applicable. Modes: none (dev / loopback), jwt, oauth.make_proxy_client() in composition.py (forward_incoming_headers=False); keep tests/unit/test_no_token_passthrough.py green.is_insecure_public_bind (in cli.py) refuses GF_AUTH_MODE=none on a non-loopback bind unless GF_ALLOW_INSECURE=true.resource_base_url = the audience (…/mcp), not the root base_url; tolerate a duplicated /mcp in the resource (some clients append it). Serve RFC 9728 Protected Resource Metadata + WWW-Authenticate.make ci-local.resource_base_url to the root base_url (breaks RFC 8707 audience validation).