Summary
Runs an adversarial probe against your login flow, checking for redirect leaks, missing CSRF tokens, weak session cookies, and OAuth misconfigurations. It drives the auth sequence in a recorded browser session, then runs a configurable set of tests (csrf, redirect, cookie, oauth) against the captured artifacts and live page. Output lands in a structured findings.md with severity ratings and a pass/warn/fail verdict. Good for pre-deployment audits or investigating suspected token leaks. The probes are deliberately limited to inspection, they don't exploit findings, and all credentials stay vaulted. Expect 15 to 40 trajectory steps per run.
Install to Claude Code
npx -y skills add ruvnet/ruflo --skill browser-auth-flow --agent claude-codeInstalls into .claude/skills of the current project.
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Files
SKILL.md
Select a file.
Featured
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
