toddcaron/codepulse

codepulse-mfa

Performs only the Multi-Factor Authentication portion of the health check.

소스 보기

사용 방법

  1. 설치 명령을 복사하고 자신의 에이전트 환경에 설치하기 전에 소스 패키지를 확인하세요.
  2. 필요한 도구, 인증 정보, 지원 환경은 원본 문서에서 확인하세요.
  3. 입력과 원하는 산출물을 설명하고 출처와 결과를 대조하세요.
npx skills add https://github.com/toddcaron/codepulse --skill codepulse-mfa

시작 전 확인

  • 설치에는 모델 구독, API 한도, 파일 접근 권한이 포함되지 않습니다.
  • 별점 수와 설치 수는 활동 지표이며 독립적인 품질·보안 검증이 아닙니다.
원본 Skill 문서

원본 저장소의 제목, 예시, 코드, 표, 링크, 이미지를 유지해 표시합니다.

MFA Implementation Health Check

Input

Use the entire codebase as the context for this skill. Focus on authentication, authorization, identity provider integration, login flows, configuration files, middleware, security policies, and access control code.

Scope

Perform only step 2 from healthcheck-full:

  • Check for the implementation of Multi-Factor Authentication (MFA) in the codebase.

Do not perform LOC counting, vulnerability analysis, code quality review, dead code detection, dependency currency checks, or external access analysis unless those findings directly affect MFA.

Analysis Requirements

Look for evidence of:

  • MFA enforcement.
  • Conditional access or identity provider integration.
  • Authentication middleware.
  • Login and sign-in flows.
  • Bypass paths or fallback authentication.
  • Admin-only MFA requirements versus all-user MFA requirements.
  • Hardcoded authentication behavior.
  • Configuration-driven MFA settings.

If MFA cannot be confirmed from the codebase, clearly state that MFA was not found or could not be verified from available code.

Shared References

Before performing the assessment, review:

  • references/report-template.html
  • references/grading-model.md
  • references/recommendations-library.md

Requirements:

  • Use report-template.html for the final HTML output.
  • Use grading-model.md when calculating grades.
  • Use MFA recommendations from recommendations-library.md when implementation gaps are identified.

Output

Create a focused HTML report section for MFA only. File output path = codepulse-mfa/reports/

Include:

  • Whether MFA appears to be implemented.
  • Evidence from files, configuration, or code patterns.
  • Gaps, bypass risks, or unclear areas.
  • Security implications.
  • A letter grade from D to A.
  • Actionable recommendations for improving MFA coverage.

관련 작업

같은 저장소의 Skills

더 많은 Skills

모든 Skills