4,624 skills sorted by stars.
Scaffold authentication with Auth.js (NextAuth v5), including providers, session handling, middleware protection, and ro...
JWT authentication with Better Auth, token verification, user isolation, and security middleware. Use when implementing...
OAuth 2.1 + JWT authentication security best practices. Use when implementing auth, API authorization, token management....
Authentication and authorization: JWT, OAuth 2.0 / OIDC, session management, CSRF, password hashing, MFA, and object-lev...
Authentication, secret management, and security patterns for VoxAgent. Use when handling API keys, implementing authenti...
Reviews authentication and authorization implementation for session management, CSRF, cookie security, and auth flow vul...
Build the authentication and authorization stack for a repository already set up to STACKSPEC — packages/auth, the auth...
Google OAuth クライアント設定の手順を案内する。「OAuth 設定」「Google 認証の準備」「クライアント ID 作成」「認証手順を教えて」「Google ログイン準備」「OAuth セットアップ」「認証設定したい」などで起...
Handle secure user authentication including signup, signin, password hashing, JWT tokens, and Better Auth integration. U...
Design and implement authentication. Use for provider choice, OAuth, passkeys, MFA, RBAC, sessions, or B2B SSO. Read REA...
Use CloudBase Auth tool to configure and manage authentication providers for web applications - enable/disable login met...
Complete guide for CloudBase Auth v2 using Web SDK (@cloudbase/js-sdk@2.x) - all login flows, user management, captcha h...
Complete guide for WeChat Mini Program authentication with CloudBase - native login, user identity, and cloud function i...
Manage users, applications, and authentication via Auth0 Management API.
Sign in to the wallet. Use when you or the user want to log in, sign in, connect, or set up the wallet, or when any wall...
Authentication: JWT/OAuth-OIDC/sessions/API keys, password storage, secrets, CSRF/CORS/cookies. Verify with evidence; se...
Implement iOS authentication patterns including Sign in with Apple (ASAuthorizationAppleIDProvider, ASAuthorizationContr...
認証機能（Authentication Policy, MFA）の開発・修正を行う際に使用。認証ポリシー、パスワード、OTP、FIDO2、条件付き認証実装時に役立つ。
Authentication and authorization including JWT, OAuth2, OIDC, sessions, RBAC, and security analysis. Activate for login,...
Authentication and authorization including JWT, OAuth2, sessions, and RBAC. Activate for login, auth flows, security, ac...
Implement secure authentication and authorization using Clerk. Use this skill when you need to authenticate users, prote...
Offensive authentication and authorization security enforcement. Triggered when implementing login/signup, reviewing JWT...
Comprehensive authentication and authorization patterns for Eridu Services. This skill should be used when implementing...
認証・認可の設計とセキュリティ検証（OAuth 2.0、JWT、セッション管理、アクセス制御）の実務指針を提供するスキル。脅威モデリング、トークン管理、権限モデルの選択を整理し、安全な認証基盤の設計判断を支援します。Anchors:• We...
Use established authentication libraries rather than implementing from scratch Use when implementing security best pract...
Use this skill whenever you need to audit, test, or fix Authentication Failures (OWASP A07:2025) in Python web applicati...
Detects weak password storage, flawed JWT validation, sessions surviving logout, and missing MFA in authentication code....
API Key、JWT、OAuth 2.0、mTLS などの認証方式を比較し、適切なフロー設計と実装方針を整理するスキル。方式選定、トークン管理、署名戦略、セキュリティ対策を一貫して設計します。Anchors:• Web Applicati...
Authentication patterns for external services: API keys, OAuth, token management, verification.Triggers: authentication,...
Comprehensive authentication implementation guidance including JWT best practices, OAuth 2.0/OIDC flows, Passkeys/FIDO2/...
Authentication and authorization patterns including OAuth 2.0, OIDC, JWT, session management, MFA, and passkeys. Use whe...
Audits login, registration, password, MFA, CAPTCHA, account recovery, reauthentication, session-expiry, and security-int...
Manage the Authentik identity provider via its REST API. Use when: (1) User asks to create, update, or delete users in A...
Configure Authentik as OIDC provider for Kubernetes API server authentication. Use when: (1) setting up OIDC auth for ku...
Auth.js v5 setup for Next.js authentication including Google OAuth, credentials provider, environment configuration, and...
Design or review an MCP server’s resources, prompts, tools, schemas, transport, authentication, pagination, errors, and...
Check authorization at every access point, not just the UI layer Use when implementing security best practices. Security...
Authorization security standards covering RBAC, ABAC, policy enforcement, OAuth2 scopes, resource-based access control,...
Use this skill when you need evidence-bounded authorization-testing analysis and validation preparation; triggers includ...
Authorization X-ray for your own codebase (defensive audit): inventories every HTTP endpoint and every recognizable prot...
Manage persistent allowlist for pre_tool_use hook bypass
Inject secrets into subprocesses via environment variables. You never see secret values — authy run injects them directl...
Use when reviewing authorization end-to-end — route → gate → policy → query scope → response filter — before changes to...
Review application source code for broken authorization — IDOR / Broken Object Level Authorization (OWASP API1), Broken...
全自动外贸客户开发编排器 — 一句话触发「搜索 → 背调 → 评分 → 写信 → 交付草稿 → 入库 → 日志」端到端流水线
Review an AutoGen multi-agent system for inter-agent message spoofing, trust boundary collapse between orchestrator and...
AI-driven dynamic security fuzzing, exploit generation (XSS, SQLi, SSRF, Prompt Injection), and automated patch remediat...
Automated pentest pipelines — designing, running, and auditing bash-driven recon-to-report automation