Catch bugs by exploring web and mobile apps with QA agents
New-device 2FA prompt skipped. Task: Suggested implementation: Use a QA agent to simulate user login flows on a consumer fintech app. The agent should attempt to bypass security checkpoints, such as new-device 2FA prompts, by manipulating login routing. A human reviewer must validate the agent's findings and confirm the vulnerability before any remediation steps are taken.; tools: custom-built or unnamed agent. Human role: The original post does not say how a person stayed involved.; limitations: Prerequisites include access to a staging environment and a custom-built or unnamed QA agent. The source does not state specific limitations or operating costs. Human approval is strictly required before any changes are applied to production systems. Source reliability is secondary..
Tools
custom-built or unnamed agent
Published on Agent Work Atlas:
Overview
New-device 2FA prompt skipped
Workflow
Suggested implementation: Use a QA agent to simulate user login flows on a consumer fintech app. The agent should attempt to bypass security checkpoints, such as new-device 2FA prompts, by manipulating login routing. A human reviewer must validate the agent's findings and confirm the vulnerability before any remediation steps are taken.
Reported result
Actual outcomes are unknown as the source provides no measured results or success metrics. A proposed acceptance check is to verify if the agent successfully identifies and logs a bypassed 2FA prompt in a controlled test environment, with the finding confirmed by a security engineer.
Human role
The original post does not say how a person stayed involved.
Limitations
Prerequisites include access to a staging environment and a custom-built or unnamed QA agent. The source does not state specific limitations or operating costs. Human approval is strictly required before any changes are applied to production systems. Source reliability is secondary.
Try it
Act as a QA engineer. I need you to test the login flow of our consumer fintech app [replaceable input: app URL/staging link] using a custom QA agent. Your goal is to identify if a new-device 2FA prompt can be bypassed via login routing changes. 1. Simulate a new device login attempt. 2. Attempt to manipulate the routing to skip the 2FA step. 3. Document the steps taken and the outcome. 4. Stop and present your findings to me for human confirmation before suggesting any fixes. Do not modify any production data. If the agent cannot access the environment, report the error immediately. Measure success by whether the bypass is detected and logged accurately.
Source reports are not independently verified. Publication date is the catalog publication date, not the original article date.