← All skills
Skill
testing-api-authentication-weaknesses
skill:mukul975/anthropic-cybersecurity-skills#testing-api-authentication-weaknesses
Tests API authentication mechanisms for weaknesses including broken token validation, missing authentication on endpoints, weak password policies, credential stuffing susceptibility, token leakage in URLs or logs, and session management flaws. The tester evaluates JWT implementation, API key handling, OAuth flows, and session token entropy to identify authentication bypasses. Maps to OWASP API2:2023 Broken Authentication. Activates for requests involving API authentication testing, token validation assessment, credential security testing, or API auth bypass.
Verdict
Inconclusive
The analysis could not cover enough of the artifact to decide.
0
findings
—
highest severity
0
threat classes
4,532
files scanned
68/69
checks satisfied
0
package advisories
Why this verdict
- inconclusive: gap invalid_judge_finding
- inconclusive: gap ledger_finding_without_valid_finding
- inconclusive: judge runs incomplete or invalid
- inconclusive: ledger 68/69 checks satisfied
Security findings 0
No individual findings recorded
The inconclusive verdict rests on the coverage gaps below.
Coverage gaps 2
Parts of the artifact the static analysis could not fully examine.
ledger_finding_without_valid_finding run 1: instruction-surface.0 SRC:60b025016f609e4finvalid_judge_finding instruction-surface.0