checking-session-security

## Overview This skill automates the process of reviewing session security within a project. It helps identify potential vulnerabilities related to session management, ensuring compliance with security best practices. ## How It Works 1. **Analyze Codebase**: The skill analyzes the codebase for session management related code. 2. **Identify Vulnerabilities**: It identifies potential vulnerabilities, such as weak session ID generation, missing session expiration, or susceptibility to session fixation. 3. **Generate Report**: The skill generates a report outlining the identified vulnerabilities and suggests remediation steps. ## When to Use This Skill This skill activates when you need to: - Check session security implementation. - Audit session handling practices. - Review session management code for vulnerabilities. - Ensure compliance with session security best practices. ## Examples ### Example 1: Identifying Session Fixation Vulnerability User request: "Check session security in my web application." The skill will: 1. Analyze the code for session creation and management. 2. Identify if the application is vulnerable to session fixation attacks. ### Example 2: Reviewing Session Expiration Settings User request: "Review session implementation to ensure proper expiration." The skill will: 1. Analyze the code to determine how session expiration is handled. 2. Identify if sessions are expiring correctly and suggest appropriate timeout values. ## Best Practices - **I...