browser-auth-flow
Probe a site's authentication flow for redirect leaks, missing CSRF, weak session cookies, and OAuth misconfiguration; produces an auth findings.md
Best for security auditsWorks with GitHub
⌘source
- author
@ruvnet- repo
- ruvnet/ruflo
- language
- TypeScript
★46kstars
5.1kforks
May 5, 2026
✦overview.md
Key Features
- ·Adversarial probe of auth flows
- ·Drives login and records trajectory
- ·Configurable probes: CSRF, redirect, cookie, OAuth
- ·Outputs structured findings.md
- ·Supports re-auth with stored credentials
Use Cases
- →Pre-deployment audit of a new authentication flow
- →Investigating suspected token leaks or redirect issues
- →Establishing a baseline for ongoing regression checks
Best for
- ✓security audits
- ✓pre-release verification
- ✓regression testing
Not ideal for
- !non-web apps
- !static sites without auth
FAQs
name
browser-auth-flow
description
Probe a site's authentication flow for redirect leaks, missing CSRF, weak session cookies, and OAuth misconfiguration; produces an auth findings.md
argument-hint:<login-url> [--credentials <handle>] [--probes csrf,redirect,cookie,oauth]
allowed-tools:mcp__claude-flow__browser_open mcp__claude-flow__browser_close mcp__claude-flow__browser_fill mcp__claude-flow__browser_type mcp__claude-flow__browser_click mcp__claude-flow__browser_wait mcp__claude-flow__browser_eval mcp__claude-flow__browser_snapshot mcp__claude-flow__browser_get-url mcp__claude-flow__aidefence_has_pii mcp__claude-flow__aidefence_scan Bash Read Write
Browser Auth Flow
Adversarial probe of a site's authentication. Drives the login flow once, records the trajectory, then runs a configurable set of probes against the captured artifacts and live page. Output is a structured findings.md inside the RVF container.
When to use
- Pre-deployment audit of a new auth flow.
- Investigating a suspected token leak or redirect issue.
- Establishing a baseline for ongoing regression checks.
Steps
-
Open a recorded session via
browser-record. -
Drive the auth flow as in
browser-login(credentials come from--credentials <handle>referencingbrowser-cookiesif the run is a re-auth probe). -
Run probes:
csrf: inspect the login POST in the trajectory; verify a same-origin token field is present and non-empty.redirect: watchbrowser_get-urlafter each nav for cross-origin redirects with auth state in the URL or fragment. Flag any token-bearing URL that crosses an origin boundary.
$install
1-click copynpx skills add ruvnet/ruflo --skill browser-auth-flowSafety assessment
★
Clarity score
How clear and easy to understand the SKILL.md instructions are, rated from 1 to 5.
4/ 5
very goodClear and well structured, with only minor parts that might need a second read.
◎
Actionability score
How directly an agent can act on the SKILL.md instructions, rated from 1 to 5.
4/ 5
highMostly actionable with clear steps; only a few small gaps remain.