jchigg2000-git

Harden Auth — Development skill for Claude Code

Development community

Deployment hardening step 2 — review auth/session/authz surfaces.

How to install Harden Auth

Installs to ~/.claude/skills/jchigg2000-git-claude-code-dev-harden-auth/SKILL.md

Terminal

mkdir -p ~/.claude/skills/jchigg2000-git-claude-code-dev-harden-auth && curl -fsSL https://raw.githubusercontent.com/jchigg2000-git/claude-code-dev/HEAD/commands/harden-auth.md -o ~/.claude/skills/jchigg2000-git-claude-code-dev-harden-auth/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Harden Auth does

description: Deployment hardening step 2 — review auth/session/authz surfaces. Identifies insecure cookies, broad CORS, missing CSRF, unauthenticated state-changing routes, weak password storage, JWT secret handling. Read-only by default; --fix tightens cookie flags and obvious CORS misconfigs only with confirmation. Fire on `/harden-auth`. argument-hint: "[--fix] [scope path]" allowed-tools: Bash(rg:), Bash(jq:), Bash(git:), Bash(date:), Bash(mkdir:*), Read, Glob, Grep, Write

Har

Alternatives in Development

JWT Scan — JWT attack toolkit (offline) — alg:none forgery, RS256→HS256 algorithm confusion, weak-secret crack, static cl 4.5k ★
StatsPAI — StatsPAI is the first Agent-native Python library for causal inference and applied econometrics — unified API 302 ★
Serve — Start a local http server on 127.0.0.1:4567 to avoid file:// CORS issues 102 ★