toddcaron/codepulse

codepulse-mfa

Performs only the Multi-Factor Authentication portion of the health check.

Vedi sorgente

Come usare

  1. Copia il comando e controlla il pacchetto prima di installarlo nel tuo ambiente agente.
  2. Controlla strumenti, credenziali e ambienti richiesti nel documento originale.
  3. Descrivi input e risultato desiderato; confronta l’output con le fonti.
npx skills add https://github.com/toddcaron/codepulse --skill codepulse-mfa

Prima di iniziare

  • L’installazione non include abbonamenti, quote API o accesso ai file.
  • Stelle e installazioni indicano attività, non un test indipendente di qualità o sicurezza.
Documento Skill originale

Contenuto dal repository con titoli, esempi, codice, tabelle, link e immagini preservati.

MFA Implementation Health Check

Input

Use the entire codebase as the context for this skill. Focus on authentication, authorization, identity provider integration, login flows, configuration files, middleware, security policies, and access control code.

Scope

Perform only step 2 from healthcheck-full:

  • Check for the implementation of Multi-Factor Authentication (MFA) in the codebase.

Do not perform LOC counting, vulnerability analysis, code quality review, dead code detection, dependency currency checks, or external access analysis unless those findings directly affect MFA.

Analysis Requirements

Look for evidence of:

  • MFA enforcement.
  • Conditional access or identity provider integration.
  • Authentication middleware.
  • Login and sign-in flows.
  • Bypass paths or fallback authentication.
  • Admin-only MFA requirements versus all-user MFA requirements.
  • Hardcoded authentication behavior.
  • Configuration-driven MFA settings.

If MFA cannot be confirmed from the codebase, clearly state that MFA was not found or could not be verified from available code.

Shared References

Before performing the assessment, review:

  • references/report-template.html
  • references/grading-model.md
  • references/recommendations-library.md

Requirements:

  • Use report-template.html for the final HTML output.
  • Use grading-model.md when calculating grades.
  • Use MFA recommendations from recommendations-library.md when implementation gaps are identified.

Output

Create a focused HTML report section for MFA only. File output path = codepulse-mfa/reports/

Include:

  • Whether MFA appears to be implemented.
  • Evidence from files, configuration, or code patterns.
  • Gaps, bypass risks, or unclear areas.
  • Security implications.
  • A letter grade from D to A.
  • Actionable recommendations for improving MFA coverage.

Correlati per attività

dallo stesso repository

Altri Skills

Tutti gli Skills