Harden Auth
Description
--- description: Deployment hardening step 2 — review auth/session/authz surfaces. Identifies insecure cookies, broad CORS, missing CSRF, unauthenticated state-changing routes, weak password storage, JWT secret handling. Read-only by default; --fix tightens cookie flags and obvious CORS misconfigs only with confirmation. Fire on `/harden-auth`. argument-hint: "[--fix] [scope path]" allowed-tools: Bash(rg:*), Bash(jq:*), Bash(git:*), Bash(date:*), Bash(mkdir:*), Read, Glob, Grep, Write --- # Har
Installation
Installs to ~/.claude/skills/jchigg2000-git-claude-code-dev-harden-auth/SKILL.md
mkdir -p ~/.claude/skills/jchigg2000-git-claude-code-dev-harden-auth && curl -fsSL https://raw.githubusercontent.com/jchigg2000-git/claude-code-dev/HEAD/commands/harden-auth.md -o ~/.claude/skills/jchigg2000-git-claude-code-dev-harden-auth/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
Full documentation available on GitHub
View Source RepositoryRelated Skills
Auto Update
Pull the latest ECC repo changes and reinstall the current managed targets.
Ecc Guide
Navigate ECC's current agents, skills, commands, hooks, install profiles, and docs from the live repository su
Epic Claim
Claim an epic issue, stamp coordination state, and sync local ownership.
Epic Publish
Publish a validated epic update back to the issue and local cache.
Epic Review
Mark epic review requested, approved, or changes requested.
Epic Unblock
Sweep blocked epic issues and reopen anything whose dependencies are closed.