Authentication

Validate authentication mechanisms for security weaknesses and compliance.

jeremylongshore/tons-of-skills-marketplace

Intercept and debug HTTP traffic from any CLI, service, or script using HTTP Toolkit.

Factory-AI/factory-plugins

A skill your agent uses when debugging or handling API errors in Frappe/ERPNext v14/v15/v16.

Impertio-Studio/Frappe_Claude_Skill_Package

MUST activate when the project contains a uiBundles//src/ directory and the user wants to add a pre-built feature — such as authentication (login, logout, protected routes, session management) or…

forcedotcom/sf-skills

MUST activate when the project contains a uiBundles//src/ directory (React or Angular) and the user wants to add a pre-built feature — such as authentication (login, logout, protected routes…

forcedotcom/sf-skills

Probe a site's authentication flow for redirect leaks, missing CSRF, weak session cookies, and OAuth misconfiguration; produces an auth findings.md

ruvnet/ruflo

A skill your agent uses when protecting LiveViews with authentication — onmount hooks, livesession, mountcurrentscope, auth redirect testing.

j-morgan6/elixir-phoenix-guide

Hunting skill for auth bypass vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter.

elementalsouls/Claude-BugHunter

Secure authentication patterns (OWASP, NIST). An agent skill from jamditis/claude-skills-journalism.

jamditis/claude-skills-journalism

Build and configure a GraphQL API backed by Neo4j using @neo4j/graphql v7 (current) or v5 (LTS).

neo4j-contrib/neo4j-skills

Fishjam platform fundamentals — domain model and auth shared by all SDKs.

software-mansion-labs/skills

Scan a source-code tree for hardcoded credentials embedded in source files: AWS access keys, GitHub tokens, Stripe keys, Slack tokens, Anthropic API keys, OpenAI keys, JWT signing secrets, generic…

jeremylongshore/tons-of-skills-marketplace

A skill your agent uses when you need to design, review, or improve security in Spring Boot applications — including SecurityFilterChain, OAuth2/JWT resource server patterns, form login basics…

jabrena/plinth

A skill your agent uses when you need to design, review, or improve security in Quarkus applications — including Quarkus Security with JWT/OIDC, basic auth, @RolesAllowed / @Authenticated /…

jabrena/plinth

A skill your agent uses when you need to design, review, or improve security in Micronaut applications — including micronaut-security authentication, @Secured and intercept-url-map rules…

jabrena/plinth

Version-aware guide for configuring and running Apollo Router for federated GraphQL supergraphs.

apollographql/skills

Manage AWS accounts, organizations, IAM, and billing. An agent skill from hoodini/ai-agents-skills.

hoodini/ai-agents-skills

Authentication integration guidance — Clerk (native Vercel Marketplace), Better Auth, Descope, and Auth0 setup for Next.js applications, plus Sign in with Vercel, Vercel Passport, and Vercel KMS.

vercel/vercel-plugin

How auth works in agent-native apps. An agent skill from BuilderIO/agent-native.

BuilderIO/agent-native

Hunt Clickjacking — missing X-Frame-Options / CSP frame-ancestors lets an attacker embed the target page in an invisible iframe and trick victims into clicking buttons they cannot see (UI redressing).

elementalsouls/Claude-BugHunter

OAuth 2.1 + JWT authentication security best practices. An agent skill from majiayu000/spellbook.

majiayu000/spellbook

Provides C and ASP.NET Core coding standards for this repository.

microsoft-foundry/foundry-agent-webapp

WORKFLOW SKILL — Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.

jonathan-vella/apex

Hunt JWT cryptographic failures

sickn33/agentic-awesome-skills

Hunt SAML / SSO attacks.

sickn33/agentic-awesome-skills

Azure Identity library for Rust. An agent skill from microsoft/skills.

microsoft/skills

Clerk auth with API Keys beta (Dec 2025), Next.js 16 proxy.ts (March 2025 CVE context), API version 2025-11-10 breaking changes, clerkMiddleware() options, webhooks, production considerations (GCP…

LeoYeAI/openclaw-master-skills

Publish posts to Moltbook social network for AI agents. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

Generate AdvPL/TLPP code that CONSUMES external REST APIs using the FWRest client class.

totvs/engpro-advpl-tlpp-skills

A skill your agent uses when preparing your agent for production — IAM scoping, inbound auth (JWT, SigV4), secrets management, cold start optimization, session lifecycle, rate limiting, input…

aws/agent-toolkit-for-aws

Configure Multi-Factor Authentication (MFA) for Salesforce Experience Site users.

forcedotcom/sf-skills

Salesforce Connected Apps and External Client Apps OAuth configuration with 120-point scoring.

forcedotcom/sf-skills

Operate Coinbase Advanced Trade REST APIs through UXC with a curated OpenAPI schema, products-first discovery, and explicit JWT bearer auth guidance.

holon-run/uxc

Operate Discord HTTP API through UXC with Discord OpenAPI schema.

holon-run/uxc

Skill for reading and writing Twitter/X data with Python + UV, with zero third-party dependencies (pure standard library), by directly passing the authtoken + ct0 cookies for authentication.

OpenMinis/MinisSkills

Skill for reading and writing Xiaohongshu (XHS) data using Python + UV.

OpenMinis/MinisSkills

API attack hunting (REST / GraphQL / gRPC) - BOLA/IDOR, BFLA, mass assignment, excessive data exposure, auth/JWT, introspection + batching, rate-limit abuse.

Encod3d-Sec/TORCH

Auth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /vtibin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation.

Encod3d-Sec/TORCH

Guide the design and implementation of order lifecycle management in trading systems.

JoelLewis/finance_skills

Discover the effective local AWS profile, region, account, and caller identity before any AWS task without exposing credentials.

sickn33/agentic-awesome-skills

A skill your agent uses when implementing user authentication and sign-in forms.

thedaviddias/ux-patterns-for-developers

A skill your agent uses when implementing oAuth and social media authentication.

thedaviddias/ux-patterns-for-developers

A skill your agent uses when implementing two-factor authentication setup and verification.

thedaviddias/ux-patterns-for-developers

Use as the auth build stage of the Butterbase journey, after journey-schema (and rls if separate).

butterbase-ai/butterbase-skills

Use CloudBase Auth tool to configure and manage authentication providers for web applications - enable/disable login methods (SMS, Email, WeChat Open Platform, Google, Anonymous, Username/password…

LeoYeAI/openclaw-master-skills

CloudBase Web Authentication Quick Guide - Provides concise and practical Web frontend authentication solutions with multiple login methods and complete user management.

LeoYeAI/openclaw-master-skills

Complete guide for WeChat Mini Program authentication with CloudBase - native login, user identity, and cloud function integration.

LeoYeAI/openclaw-master-skills

Adds user authentication to web and mobile apps with Amazon Cognito (user pools and identity pools) and the AWS Amplify client auth libraries.

aws/agent-toolkit-for-aws