Skip to content
appsgit

Broken Authentication

Broken Authentication is an agent skill (a SKILL.md file) from zebbern/claude-code-guide. It should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password. It works with Claude Code, Codex and Cursor and has 4,648 GitHub stars across a repository of 4 listed skills.

github.com/zebbern/claude-code-guide/skills/broken-authentication (opens in a new tab)

  • Multi-skill repo
  • Security
  • Actively maintained
View on GitHub (opens in a new tab)

Add this skill

Claude

Claude Code loads skills from ~/.claude/skills/ (all projects) or .claude/skills/ (one project):

git clone --depth 1 https://github.com/zebbern/claude-code-guide.git
cp -r claude-code-guide/skills/broken-authentication ~/.claude/skills/broken-authentication   # personal, or .claude/skills in a project

In the Claude apps, zip the broken-authentication folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).

ChatGPT / Codex

Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:

git clone --depth 1 https://github.com/zebbern/claude-code-guide.git
cp -r claude-code-guide/skills/broken-authentication .agents/skills/broken-authentication   # repo; ~/.agents/skills for all projects

Standalone skills also load in the ChatGPT desktop app.

Cursor

Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:

git clone --depth 1 https://github.com/zebbern/claude-code-guide.git
cp -r claude-code-guide/skills/broken-authentication .cursor/skills/broken-authentication   # project; ~/.cursor/skills for all projects

Source (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)

What this skill does

This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test for session fixation", or "identify authentication bypass flaws". It provides comprehensive techniques for identifying authentication and session management weaknesses in web applications. Identify and exploit authentication and session management vulnerabilities in web applications.

When it triggers

  • used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test for session fixation", or "identify authentication b
  • "test for broken authentication vulnerabilities"
  • "assess session management security"
  • "perform credential stuffing tests"
  • "evaluate password policies"
  • "test for session fixation"
  • "identify authentication bypass flaws"

More skills in zebbern/claude-code-guide

4 skills are listed from this repository.

Similar skills

More security skills

All Security

FAQ

Broken Authentication FAQ

Still curious? Email info@appsgit.com.

What is the Broken Authentication skill?

Broken Authentication is an agent skill (a SKILL.md file) from zebbern/claude-code-guide. It should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password. It works with Claude Code, Codex and Cursor and has 4,648 GitHub stars across a repository of 4 listed skills. Its SKILL.md lives at github.com/zebbern/claude-code-guide/skills/broken-authentication.

How do I install the Broken Authentication skill?

Copy the broken-authentication folder (the one containing SKILL.md) into ~/.claude/skills/ for Claude Code, .agents/skills/ for Codex or .cursor/skills/ for Cursor. The agent picks it up automatically when a task matches its description.

Is the Broken Authentication skill free?

Yes. The repository is open source under the MIT license.

Is Broken Authentication maintained?

The repository's most recent commit was on Oct 7, 2026. appsgit only lists skills from repositories with a commit in the last six months.