Authentication skills

Azure Identity SDK for Python

sickn33

Streamline Azure authentication in Python applications.

Ktor Server Patterns

affaan-m

Build robust HTTP servers with Kotlin and Ktor.

Flow Nexus Platform Management

ruvnet

Manage your Flow Nexus platform with ease.

Implementing Digital Signatures with Ed25519

mukul975

Securely sign and verify messages with Ed25519.

Zero-Knowledge Proof for Authentication

mukul975

Securely authenticate without revealing secrets.

Passwordless Authentication with FIDO2

mukul975

Securely implement passwordless login using FIDO2 standards.

Deliverability QA

aaron-he-zhu

Ensure your emails reach inboxes with a pre-send check.

Azure Identity SDK for TypeScript

sickn33

Authenticate to Azure services seamlessly.

Azure Identity SDK for Rust

sickn33

Streamline Azure authentication in Rust applications.

OAuth for Fastify

mcollina

Streamline OAuth 2.0/2.1 integration in Fastify applications.

Authentication Patterns

wshobson

Master secure authentication and authorization systems.

.NET Backend Agent

davila7

Expertly build ASP.NET Core backend services with ease.

Data Manager API Setup

google

Streamline your Data Manager API environment setup.

Configure Auth

dotnet

Easily add authentication to Blazor Web Apps.

M

MCP Apps Builder

shubhamsaboo

Essential guidelines for MCP server development.

MCP Integration

davila7

Seamlessly integrate external services with Claude Code.

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

Drive an authentication flow once, sanitize cookies through AIDefence, and vault a reusable cookie handle in browser-cookies for future sessions

Set up and use 1Password CLI for sign-in, desktop integration, and reading or injecting secrets.

Implements secure JWT (RFC 7519) signing and verification using HMAC-SHA256, RSA-PSS, ES256, and EdDSA, including token expiration, claims validation, and defenses against algorithm-confusion, none-algorithm, and key-injection attacks. Use when adding or hardening JWT-based authentication/authorization, or when auditing token verification code for common JWT vulnerabilities.

Configures SAML 2.0 single sign-on for Google Workspace against a third-party identity provider (Okta, Azure AD/Entra ID, ADFS), with Workspace as the Service Provider, to centralize authentication and enable immediate access revocation. Use when setting up or troubleshooting Google Workspace SSO/SAML federation or migrating from native Google passwords to an external IdP.

Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.

Execute this skill enables AI assistant to conduct a security-focused code review using the security-agent plugin. it analyzes code for potential vulnerabilities like sql injection, xss, authentication flaws, and insecure dependencies. AI assistant uses this skill wh... Use when assessing security or running audits. Trigger with phrases like 'security scan', 'audit', or 'vulnerability'.

MUST activate when the project contains a uiBundles/*/src/ directory and the user wants to add a pre-built feature — such as authentication (login, logout, protected routes, session management) or search (global search across pages and content) — instead of building it from scratch. Always run list first to see the current feature catalog, since it can include more than authentication and search. Always use this skill for installing pre-built features rather than hand-building them. DO NOT TRIGGER for Agentforce conversational client or file-upload features — use experience-ui-bundle-agentforce-client-generate and experience-ui-bundle-file-upload-generate respectively.