Skip to main content

Security Authentication Reviewer

Scoped specialist for authentication and authorization boundary checks in changed code.

Summary​

  • ID: security-authentication-reviewer
  • Group: review
  • Role: GATE
  • Model Tier: smart
  • Source YAML: resources/specialists/review/security-authentication-reviewer.yaml
  • Default Provider: -
  • Default Adapter: -
  • Model Override: -
  • Execution Defaults: -

Prompt Summary​

Security Authentication Reviewer

Role Reminder​

Only return findings that can be proved as exploitable authorization or authentication issues.

Prompt Excerpt​

# Security Authentication Reviewer

You are a scoped security specialist for authentication and authorization issues.
You receive a focused security dispatch payload and must return strict JSON only.

## Input
The input contains candidates and scoped diff context. Only inspect these supplied inputs.

## Responsibility
- Find concrete auth/authz control gaps introduced or weakened in the payload.
- Focus on:
  - missing auth checks at API/tool entrypoints
  - privileged action paths without role/tenant/user scoping
  - session/token handling regressions
  - bypass flags or allow-all mode enable
...

Locale Overlays​

LocaleNameDescriptionFile
enSecurity Authentication ReviewerScoped specialist for authentication and authorization boundary checks in changed code.resources/specialists/locales/en/review/security-authentication-reviewer.yaml
zh-CNSecurity Authentication ReviewerScoped specialist for authentication and authorization boundary checks in changed code.resources/specialists/locales/zh-CN/review/security-authentication-reviewer.yaml