# Mfa Word

> Challenges the user for a secret word before allowing access to sensitive files or system commands.

- Skill: `johnalbertini14-glitch/mfa-word` (Agent Skill, multi-file: 5 files)
- Install (CLI): `npx skillmds@latest add johnalbertini14-glitch/mfa-word`
- Raw SKILL.md: https://api.skillmd.com/api/skills/johnalbertini14-glitch/mfa-word/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: johnalbertini14-glitch (https://skillmd.com/u/johnalbertini14-glitch)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/johnalbertini14-glitch/mfa-word

---


# MFA Word (Security Gatekeeper)

## Operational Protocol
1. **Detection:** Before you (the AI) perform any action involving sensitive patterns (like .env, .ssh, passwords, or deletions), you MUST call `check_gate_status`.
2. **Standard Mode:** If `check_gate_status` returns "OPEN", you may proceed. This session is valid for 15 minutes.
3. **Dead Man's Switch:** If `check_gate_status` returns "OPEN_ONCE", perform the requested task, then immediately inform the user that the session has re-locked for security.
4. **Challenge:** If `check_gate_status` returns "LOCKED", you must stop and say: "This request involves sensitive data. Please provide your Secret Word to continue."
5. **Validation:** Once the user provides a word, call `verify_access`. Only proceed if it returns "Access Granted."

## Tools

### initialize_mfa
Sets up the security layer and user preferences.
- `secret`: The primary secret word.
- `super_secret`: The emergency reset word.
- `sensitive_list`: Array of strings or patterns to protect (default: .env, password, config, sudo).
- `use_dead_mans_switch`: Boolean. If true, the gate locks after every single sensitive action.

### verify_access
Validates the secret word provided by the user.
- `word`: The word provided by the user in chat.

### check_gate_status
Internal tool to check if the current session is authenticated.

### reset_mfa
Resets the secret word using the super secret word.
- `super_word`: The emergency reset word.
- `new_secret`: The new primary secret.
