Authentication Authorization Guardian

@mkelam/pdflab-authentication-authorization-guardian-skill-md

Offensive authentication and authorization security enforcement. Triggered when implementing login/signup, reviewing JWT token handling, debugging session issues, implementing RBAC, or preparing auth for production. Scans for token exposure, weak password policies, session hijacking vulnerabilities, CSRF risks, and privilege escalation paths. Produces auto-scan reports with security hardening recommendations.