authentication-testing SKILL.md skillA
authentication-testing from naodeng/awesome-qa-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add naodeng/awesome-qa-skills/authentication-testing@git:20260915.543141aPins git:20260915.543141a in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- naodeng/awesome-qa-skills
- Path
skills/zh/testing-types/authentication-testing/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260915.543141a, committed Sep 15, 2026
- Size
- 2,877 bytes
- Repository stars
- 301
- License
- a license file GitHub does not identify
Use this skill when you need evidence-bounded authentication-testing analysis and validation preparation; triggers include 身份认证测试 and authentication-testing.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 身份认证测试（中文版） ## 何时使用 - 需要围绕身份凭证、认证流程、失败路径和生命周期设计安全测试或审查准备。 - 需要在资料不完整时交付可复核初版，并明确假设、缺口和 Human 决策。 - 需要区分静态安全证据、计划中的验证和已发生的执行。 ## 输出格式选项 - 默认输出 Markdown，按安全风险、证据和优先级组织。 - 用户要求表格、CSV、JSON 或工单格式时，保留相同的发现字段和证据状态。 - 输出进入自动化流程前，先确认 schema、枚举值和必填字段。 ## 如何使用 1. 先读取 prompts/authentication-testing.md，执行输入审计、覆盖清单和输出合同。 2. 提取范围、环境、版本、角色、数据、依赖、限制和可用证据。 3. 围绕身份凭证、认证流程、失败路径和生命周期建立可复核场景，区分已知事实、推断和候选验证。 4. 为每项记录影响、优先级、责任角色、关闭条件和验证方法。 5. 信息不足时交付受限初版，不把风险假设写成漏洞确认或安全通过。 ## 参考文件 - 每次执行必须读取 prompts/authentication-testing.md。 - 需要评测时读取 evals/eval.yaml 和匹配的 evals/cases/。 - 只有目录存在且任务需要时，才读取 references/、examples/、scripts/ 或 output-formats.md。 ## 核心约束 - 只分析身份凭证、认证流程、失败路径和生命周期，不登录系统、不调用真实 API、不读取凭据。 - 不编造漏洞、攻击成功、修复完成、扫描覆盖或安全通过结论。 - 缺少证据时标记待确认、blocked 或 unassessed，并给出隔离验证方法。 - 风险接受、例外授权和发布判断必须留给 Human。 ## 交付前自检 - [ ] 已完成 known、missing、conflicting、stale、out_of_scope、assumptions 审计。 - [ ] 已覆盖身份认证、触发条件、预期关注点和证据状态。 - [ ] 已分离事实、推断、建议、信息缺口和 Human 决策。 - [ ] 未把静态发现或 dry-run 写成真实攻击、漏洞不存在或发布批准。 ## 常见误区 - 把泛化安全审查或 API 合同检查当成身份认证测试的完整替代。 - 只列攻击名，不写适用范围、证据、预期结果和关闭条件。 - 信息不足时直接判定安全，或为了完整性读取真实凭据。 ## 最佳实践 - 从高影响、难探测、权限敏感或数据敏感路径开始。 - 使用脱敏材料、最小权限、隔离环境和可回滚验证建议。 - 让另一位工程师能根据来源和边界复核每个安全结论。
Read the whole file at its exact version.
How to install
mdr add naodeng/awesome-qa-skills/authentication-testing@sha256:b4ae398a18092619The line at the top of this page pins the label git:20260915.543141a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ye3oxeirynhgldg6)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Sep 15, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (2877 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
naodeng/awesome-qa-skills · 301 stars · license a license file GitHub does not identify · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ye3oxeirynhgldg6 GET https://markdownregistry.com/api/v1/resolve?ref=naodeng/awesome-qa-skills/authentication-testing GET https://markdownregistry.com/api/v1/blob/b4ae398a18092619b7350a13c70f858eba525e835ed2c0390774304ed89acf80
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from naodeng/awesome-qa-skills
Every file in naodeng/awesome-qa-skills