authentication-setup
Setup and manage authentication and authorization systems including JWT, OAuth, and role-based access control.

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
npx skills add trailofbits/skillsSetup and manage authentication and authorization systems including JWT, OAuth, and role-based access control.

Helps users select appropriate Azure roles based on required permissions with least privilege access.

Implement security best practices for web apps and infrastructure, covering HTTPS, CORS, XSS, SQL injection, CSRF, rate limiting, and OWASP

Extract security requirements from threat models and business context for actionable security measures.

Implement authentication and authorization patterns like JWT, OAuth2, session management, and RBAC for secure API access.
