authentication-setup
Setup and manage authentication and authorization systems including JWT, OAuth, and role-based access control.

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "codeql analysis", "build codeql database", or "find vulnerabilities with codeql". Supports "run all" (security-and-quality suite) and "important only" (high-precision security findings) scan modes. Also handles creating data extension models and processing CodeQL SARIF output.
npx skills add trailofbits/skillsSetup and manage authentication and authorization systems including JWT, OAuth, and role-based access control.

Helps users select appropriate Azure roles based on required permissions with least privilege access.

Implement security best practices for web apps and infrastructure, covering HTTPS, CORS, XSS, SQL injection, CSRF, rate limiting, and OWASP

Extract security requirements from threat models and business context for actionable security measures.

Implement authentication and authorization patterns like JWT, OAuth2, session management, and RBAC for secure API access.
