authentication-setup
Setup and manage authentication and authorization systems including JWT, OAuth, and role-based access control.

Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Excludes view/pure/read-only functions. Use when auditing smart contracts (Solidity, Vyper, Solana/Rust, Move, TON, CosmWasm) or when asked to find entry points, audit flows, external functions, access control patterns, or privileged operations.
npx skills add trailofbits/skillsSetup and manage authentication and authorization systems including JWT, OAuth, and role-based access control.

Helps users select appropriate Azure roles based on required permissions with least privilege access.

Implement security best practices for web apps and infrastructure, covering HTTPS, CORS, XSS, SQL injection, CSRF, rate limiting, and OWASP

Extract security requirements from threat models and business context for actionable security measures.

Implement authentication and authorization patterns like JWT, OAuth2, session management, and RBAC for secure API access.
