Detects authorization flaws: IDOR, missing ownership or tenant scoping, role checks that fail open, privilege escalation, unauthenticated admin actions, mass assignment, and token/session claims trusted for permission decisions. Use when asked to review route handlers, middleware, decorators, resolvers, RBAC/ACL logic, serializers, ORM queries, token-derived scopes, or admin surfaces.
Install
npx skills add getsentry/warden-skills --skill wrdn-authznpx skills add getsentry/warden-skills --skill wrdn-authz -a claude-code -gnpx skills add getsentry/warden-skills --skill wrdn-authz -a codex -ggemini skills install https://github.com/getsentry/warden-skills.git --path skills/wrdn-authzgh skill install getsentry/warden-skills wrdn-authzgit clone --depth 1 https://github.com/getsentry/warden-skills /tmp/getsentry__warden-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/getsentry__warden-skills/skills/wrdn-authz ~/.claude/skills/wrdn-authz # Claude Code
cp -R /tmp/getsentry__warden-skills/skills/wrdn-authz ~/.agents/skills/wrdn-authz # Codex, Cursor, Gemini CLI, Copilot, OpenCode