feat(worker): extend auth-vuln agent with auth-surface and rate-limiting checks

[JonathanVD43]

Parent

#360

What to build

Extend the existing vuln-auth.txt prompt to cover two additional check classes relevant to auth-focused bug bounty campaigns: auth-surface hardening and rate-limiting bypass. This is a prompt extension — no new agent or deliverable file is created.

Auth-surface hardening: missing HTTPS enforcement on auth endpoints, insecure cookie flags (missing Secure/HttpOnly/SameSite), weak or missing CSRF protection on login/logout flows, token exposure in URLs or logs.

Rate-limiting bypass: test whether MFA verification, login, and password-reset endpoints enforce rate limits; attempt common bypass techniques (IP rotation headers, parameter variation, distributed attempts) to confirm whether limits are enforced server-side.

Acceptance criteria

• vuln-auth.txt extended with auth-surface hardening checks
• vuln-auth.txt extended with rate-limiting bypass test steps
• Auth agent deliverable includes findings for both new check classes when relevant
• Existing auth agent test coverage (authentication bypass, session management) is not regressed

Blocked by

None — can start immediately