_index-authn-authz

_index-authn-authz is a cursor rule for Cursor from atlassian/forge-skills. It costs 0 tokens per session (478 once invoked), scanned A, original, Apache-2.0.

A rule index for reviewing authentication and authorization in Atlassian Forge apps. Authentication checks who someone is; authorization checks what that person is allowed to do.

In plain words
What is it for?
Use it to choose deeper checks for app-versus-user permissions, resolver authorization, display-condition bypasses, web-trigger authentication, and manipulated Forge context.
Why use it?
It highlights common access-control mistakes, including treating hidden interface elements as protection and trusting client-provided context.

Cursor rule for Cursor

Written for Cursor: a Cursor rule (.mdc).

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add rules/atlassian/forge-skills/_index-authn-authz
Clone the repo
git clone --depth 1 https://github.com/atlassian/forge-skills

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for _index-authn-authz

README.md
[![agentmods](https://agentmods.dev/badge/rules/atlassian/forge-skills/_index-authn-authz.svg)](https://agentmods.dev/rules/atlassian/forge-skills/_index-authn-authz)
Your own site
<a href="https://agentmods.dev/rules/atlassian/forge-skills/_index-authn-authz"><img src="https://agentmods.dev/badge/rules/atlassian/forge-skills/_index-authn-authz.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Nothing until a file matches its globs; then the whole rule loads.
When invoked 478 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.00478
Opus 5 $0.00000 $0.00239
Sonnet 5 $0.00000 $0.00096
Haiku 4.5 $0.00000 $0.00048

Measured 6d ago against content hash c4ecf596e905, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

_index-authn-authz scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/forge-security-review/assets/security-rules/forge-authn-authz/_index-authn-authz.mdc · 48 lines

What it actually says

  • Scope: Authentication mechanisms, authorization checks, privilege boundaries, and access control in Forge apps.
  • Priority: Broken Authentication and Session Management is the #1 bug bounty category (~43% of submissions).

Key Forge AuthN/AuthZ Risks

  • asApp() vs asUser() privilege escalation: asApp has broader permissions than asUser; missing authz checks before asApp calls.
  • Display conditions are NOT authorization: Display conditions only hide UI; attackers can invoke modules directly via GraphQL.
  • Web triggers lack built-in auth: Must implement custom authentication and validation.
  • Resolver-side authorization missing: Client-provided context is untrusted; all sensitive actions require server-side checks.
  • Forge context manipulation: Elements of context can be attacker-controlled (EPSP-300).

Subrules

  • asApp Privilege Escalation → @forge-authn-authz/asapp-privilege-escalation.mdc
  • Prefer Using Function Context Object → @forge-authn-authz/prefer-context-authz.mdc
  • Missing Resolver Authorization → @forge-authn-authz/missing-resolver-authz.mdc
  • Display Conditions Bypass → @forge-authn-authz/display-conditions-bypass.mdc

Detection Heuristics

  • Search for asApp() calls without preceding permission/role checks.
  • Identify resolvers that access/mutate data based solely on payload IDs without ownership validation.
  • Look for display conditions in manifest without corresponding resolver-side authorization.
  • Find web triggers without authentication header validation or signature checks.

Dynamic Testing Tools

  • Direct GraphQL invocation to bypass UI
  • Multi-account testing for privilege boundaries

CWE References

  • CWE-862: Missing Authorization
  • CWE-863: Incorrect Authorization
  • CWE-284: Improper Access Control
  • CWE-306: Missing Authentication for Critical Function
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 48 lines · 0 tokens per session scan A c4ecf596e905

Subscribe to this mod's changes

_index-authn-authz is a cursor rule published in the GitHub repository atlassian/forge-skills (21 stars, last pushed today), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 478 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.