Authentication

JWT authentication implementation patterns. An agent skill from cohen-liel/hivemind.

cohen-liel/hivemind

Runs read-only production database analysis through PostHog's internal Metabase instances.

PostHog/posthog

Query tophog — the ingestion pipeline's heavy-hitter store in ClickHouse — to identify hot or expensive actors (teamid, distinctid, sessionid, partition) during incident triage.

PostHog/posthog

Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.

elementalsouls/Claude-BugHunter

Automatically discover security skills when working with authentication, authorization, input validation, security headers, vulnerability assessment, or secrets management.

rand/cc-polymath

Guide for implementing Better Auth - a framework-agnostic authentication and authorization framework for TypeScript.

einverne/dotfiles

Verify whether a CAO session is actually alive and what it really said, before reporting progress or completion to a user.

awslabs/cli-agent-orchestrator

E2E testing for Clerk apps. An agent skill from geekskai/blog.

geekskai/blog

Analyzes and explains Azure API Management architecture decisions for enterprise API marketplace implementations using VNet Internal mode, Front Door, hybrid authentication, and multi-environment…

thomast1906/github-copilot-agent-skills

Authenticate to the Venice API with a Bearer API key or with an x402 / SIWX wallet (EVM on Base, including EIP-1271 smart wallets, or Ed25519 on Solana).

veniceai/skills

Azure Identity SDK for Python authentication. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

Azure Identity SDK for Rust authentication. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

Server-Side Request Forgery detection→internal-access→proof for web apps.

s0ld13rr/pentestcode

PHP Web 源码会话与 Cookie 安全审计工具。识别 session 固定、Cookie flags 不安全、JWT 验证缺陷与记住登录风险，输出分级、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

Implement and debug OAuth 2.0 DPoP (RFC 9449) refresh token sender-constraining for WebCrypto, Node.js ES6, and browser runtimes integrating with Google's OAuth platform.

google/skills

A skill your agent uses when the user says 'API integration', 'connect APIs', 'sync data', 'data mapping', 'rate limiting', or needs system-to-system connectors with authentication, rate limit…

cwinvestments/memstack

Read CI logs, test results and failure diagnoses for the Check workflow, and retry its failed jobs, using the depot CLI against DEPOTTOKEN.

dxos/dxos

Drive an authentication flow once, sanitize cookies through AIDefence, and vault a reusable cookie handle in browser-cookies for future sessions

ruvnet/ruflo

Authentication security testing - auth bypass, JWT attacks, OAuth flaws, password attacks, 2FA bypass, CAPTCHA bypass, and bot detection evasion.

transilienceai/communitytools

Detects anomalous authentication patterns using UEBA analytics, statistical baselines, and machine learning models to identify impossible travel, credential stuffing, brute force, password spraying…

mukul975/Anthropic-Cybersecurity-Skills

Deploys and configures Wazuh SIEM/XDR for endpoint detection, covering agent authentication and management, custom decoder and rule XML creation, alert querying via the Wazuh REST API, rule testing…

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses for first-run Canvas Pilot configuration or recovery when the Canvas host, local runtime, authentication, or route setup is incomplete.

X-isdoingreat/canvas-pilot

Frontend patterns for Next.js App Router, Clerk auth, shadcn/Radix UI, and PostHog analytics.

bybren-llc/safe-agentic-workflow

Neo4j Graph Data Science (GDS) embedded plugin via Python client or Cypher — covers graphdatascience client 2.x, GraphDataScience, gds.graph.project.native, gds.graph.project.cypher, snakecase…

neo4j-contrib/neo4j-skills

On-demand index of the AI DIAL Chat design docs in docs/. An agent skill from epam/ai-dial-chat.

epam/ai-dial-chat

Build crypto wallets using Circle Modular Wallets SDK with passkey authentication, gasless transactions, and extensible module architecture.

circlefin/skills

Build non-custodial wallets where end users retain control of their private keys via Circle's user-controlled wallets SDK.

circlefin/skills

Test authenticated routes in the your project using cookie-based authentication.

Microck/ordinary-claude-skills

Add or change Elysia route handlers, validation, authentication or authorization in src/routes/.

exelearning/exelearning

Automated coordination, formatting, and learning from Claude Code operations using intelligent hooks with MCP integration.

aiskillstore/marketplace

Blueprint for wiring many apps to one shared login plus a central accounts database, so a person has a single account across every app and access to each app accrues per app (opt-in, deny-by-default).

ooiyeefei/ccc

Framework-agnostic HTTP API route testing patterns, authentication strategies, and integration testing best practices.

blencorp/claude-code-kit

Diagnose and fix incomplete local development setup. An agent skill from microsoft-foundry/foundry-agent-webapp.

microsoft-foundry/foundry-agent-webapp

This skill helps with GitHub Copilot SDK work across Node.js/TypeScript, Python, Go, .NET, and Java.

intellectronica/agent-skills

When the user needs a security assessment — threat modeling, vulnerability review, auth flow audit, dependency scanning, or says "is this secure", "review for vulnerabilities", "threat model"…

shawnpang/startup-founder-skills

Start the official Codex login flow.

greenpolo/cc-multi-cli-plugin

Mobile login and authentication flow screens. An agent skill from nexu-io/open-design.

nexu-io/open-design

A skill your agent uses when the user says 'audit API', 'check API security', 'API routes security', 'endpoint audit', 'check my routes', or needs to verify API route protection.

cwinvestments/memstack

Build applications that programmatically interact with GitHub Copilot.

aiskillstore/marketplace

Azure Identity SDK for Python authentication with Microsoft Entra ID.

microsoft/skills

Authenticate to Azure services using Azure Identity library for JavaScript (@azure/identity).

microsoft/skills

OWASP Top 10 security checklist, authentication patterns, input validation, and HTTP security headers reference.

modu-ai/moai-adk

CloudBase platform knowledge and best practices. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

A skill your agent uses when conducting a frontend security review — static analysis (risky HTML patterns, env var exposure), authentication/authorization audit (token storage, route guards…

mizchi/skills

A skill your agent uses when configuring Spring Boot as an OAuth2 resource server, validating JWTs from an external auth provider (Keycloak, Auth0, Okta, Cognito), extracting claims, or implementing…

rrezartprebreza/spring-boot-skills

A skill your agent uses when an application issues and validates its own first-party JWT access and refresh tokens, including authentication filters, password encoding, RBAC, and method security.

rrezartprebreza/spring-boot-skills

Context preservation, tiered summarization, resumability. An agent skill from alinaqi/maggy.

alinaqi/maggy

Analyze session management implementations to identify security vulnerabilities in web applications.

jeremylongshore/tons-of-skills-marketplace