菜单
Use when changing the router's authentication or authorization — JWT/OAuth modes, verifiers, resource/audience metadata, the secure-by-default bind guard, or the no-token-passthrough boundary.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when `make ci-local` fails locally or a GitHub Actions run reports a CI failure (format, lint, line-budget, typecheck, or test errors).
Use when reviewing a diff, PR, or change set for correctness and quality before merge or handoff. For a deep security-only pass, use security-review instead.
Use when bringing this repo into compliance with a GeneFoundry fleet standard (tool-naming, response-envelope, container-hardening, versioning, MCP transport, or logging) or closing its tracking issue.
Use when preparing to tag, publish, or deploy a genefoundry-router build.
Use when reviewing genefoundry-router security before deploy, when touching auth/proxy/logging/limits config, or when answering an infosec/DSB question.
Use when adding, removing, enabling/disabling, or reconfiguring a backend in the router's servers.yaml registry (URLs, namespaces, entrypoints, server_name/transform overrides).
| name | auth-change |
| description | Use when changing the router's authentication or authorization — JWT/OAuth modes, verifiers, resource/audience metadata, the secure-by-default bind guard, or the no-token-passthrough boundary. |
Follow AGENTS.md first. Auth is the router's trust boundary; ground in docs/SECURITY-ASSESSMENT-2026-06-29.md and the MCP authorization spec.
auth.py (verifiers/modes), config.py (GF_AUTH_MODE, GF_ALLOW_INSECURE, JWT/OAuth settings), and cli.py (bind guard) as applicable. Modes: none (dev / loopback), jwt, oauth.make_proxy_client() in composition.py (forward_incoming_headers=False); keep tests/unit/test_no_token_passthrough.py green.is_insecure_public_bind (in cli.py) refuses GF_AUTH_MODE=none on a non-loopback bind unless GF_ALLOW_INSECURE=true.resource_base_url = the audience (…/mcp), not the root base_url; tolerate a duplicated /mcp in the resource (some clients append it). Serve RFC 9728 Protected Resource Metadata + WWW-Authenticate.make ci-local.resource_base_url to the root base_url (breaks RFC 8707 audience validation).