toddcaron/codepulse

codepulse-mfa

Performs only the Multi-Factor Authentication portion of the health check.

查看源码

使用方法

  1. 复制安装命令,在自己的智能体环境安装前先检查源码包。
  2. 从原始文档核对所需工具、凭据和支持的宿主。
  3. 说明输入材料与期望交付物,并对照来源检查输出。
npx skills add https://github.com/toddcaron/codepulse --skill codepulse-mfa

开始前需了解

  • 安装不包含模型订阅、API 额度或访问文件的权限。
  • 仓库星数和安装量反映活跃情况,不等于独立质量或安全测试。
仓库原始内容

按源仓库内容呈现,保留标题、案例、代码、表格、链接以及原文引用的演示图片。

MFA Implementation Health Check

Input

Use the entire codebase as the context for this skill. Focus on authentication, authorization, identity provider integration, login flows, configuration files, middleware, security policies, and access control code.

Scope

Perform only step 2 from healthcheck-full:

  • Check for the implementation of Multi-Factor Authentication (MFA) in the codebase.

Do not perform LOC counting, vulnerability analysis, code quality review, dead code detection, dependency currency checks, or external access analysis unless those findings directly affect MFA.

Analysis Requirements

Look for evidence of:

  • MFA enforcement.
  • Conditional access or identity provider integration.
  • Authentication middleware.
  • Login and sign-in flows.
  • Bypass paths or fallback authentication.
  • Admin-only MFA requirements versus all-user MFA requirements.
  • Hardcoded authentication behavior.
  • Configuration-driven MFA settings.

If MFA cannot be confirmed from the codebase, clearly state that MFA was not found or could not be verified from available code.

Shared References

Before performing the assessment, review:

  • references/report-template.html
  • references/grading-model.md
  • references/recommendations-library.md

Requirements:

  • Use report-template.html for the final HTML output.
  • Use grading-model.md when calculating grades.
  • Use MFA recommendations from recommendations-library.md when implementation gaps are identified.

Output

Create a focused HTML report section for MFA only. File output path = codepulse-mfa/reports/

Include:

  • Whether MFA appears to be implemented.
  • Evidence from files, configuration, or code patterns.
  • Gaps, bypass risks, or unclear areas.
  • Security implications.
  • A letter grade from D to A.
  • Actionable recommendations for improving MFA coverage.

按任务相关推荐

来自同一仓库

更多 Skills

全部 Skills