Account Recovery Identity Review

Use this skill to convert a account recovery, identity proof, MFA reset, support escalation, anti-takeover risk, and user access restoration question into a concrete artifact with owners, gates, metrics, and recovery paths.

Workflow

1. Identify account type, authentication factors, recovery factor, asset sensitivity, abuse history, support role, and lockout cost.
2. Read references/account-recovery-identity-patterns.md.
3. Classify the recovery path: password reset, MFA reset, passkey loss, SSO fallback, email/phone change, device loss, admin recovery, or support-assisted proof.
4. Define proof requirements, friction ladder, rate limits, notifications, session invalidation, audit logs, and escalation boundaries.
5. Produce recovery state machine, risk decision table, event schema, support policy, and abuse-monitoring checklist.

When not to use

• Do not use for generic advice the base model already handles without this skill's specific artifact contract.

Guardrails