Forbidden authentication and session-management patterns — weak token generation, insecure password hashing, session fixation, JWT algorithm confusion, missing rate limits, and account enumeration. Applies when writing auth, login, session, token, password, or OAuth code.
Install
npx skills add emgiezet/aisdlc --skill auth-antipatternsnpx skills add emgiezet/aisdlc --skill auth-antipatterns -a claude-code -gnpx skills add emgiezet/aisdlc --skill auth-antipatterns -a codex -ggemini skills install https://github.com/emgiezet/aisdlc.git --path plugins/slop-guard/skills/auth-antipatternsgh skill install emgiezet/aisdlc auth-antipatternsgit clone --depth 1 https://github.com/emgiezet/aisdlc /tmp/emgiezet__aisdlc
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/emgiezet__aisdlc/plugins/slop-guard/skills/auth-antipatterns ~/.claude/skills/auth-antipatterns # Claude Code
cp -R /tmp/emgiezet__aisdlc/plugins/slop-guard/skills/auth-antipatterns ~/.agents/skills/auth-antipatterns # Codex, Cursor, Gemini CLI, Copilot, OpenCode