Auth Architecture
majiayu000/litellm-rs
LiteLLM-RS Authentication Architecture. An agent skill from majiayu000/litellm-rs.
A skill your agent uses when adding, changing, testing, or reviewing security-sensitive Rust web service behavior, especially login flows, password hashing, credential checks, session cookies, flash…
Install Rust Service Security
$ npx skills add hashgraph-online/awesome-codex-plugins --skill rust-service-security -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install hashgraph-online/awesome-codex-plugins rust-service-security --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/hashgraph-online/awesome-codex-plugins.git skills-src && mkdir -p .claude/skills && cp -r skills-src/plugins/LVTD-LLC/skills/skills/rust-service-security .claude/skills/rust-service-security && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "rust-service-security" agent skill from https://github.com/hashgraph-online/awesome-codex-plugins/tree/main/plugins/LVTD-LLC/skills/skills/rust-service-security into .claude/skills/rust-service-security/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "rust-service-security", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/hashgraph-online/awesome-codex-plugins/tree/main/plugins/LVTD-LLC/skills/skills/rust-service-securityType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add hashgraph-online/awesome-codex-plugins --skill rust-service-security -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install hashgraph-online/awesome-codex-plugins rust-service-security --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/hashgraph-online/awesome-codex-plugins.git skills-src && mkdir -p .agents/skills && cp -r skills-src/plugins/LVTD-LLC/skills/skills/rust-service-security .agents/skills/rust-service-security && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "rust-service-security" agent skill from https://github.com/hashgraph-online/awesome-codex-plugins/tree/main/plugins/LVTD-LLC/skills/skills/rust-service-security into .agents/skills/rust-service-security/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "rust-service-security", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add hashgraph-online/awesome-codex-plugins --skill rust-service-security -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install hashgraph-online/awesome-codex-plugins rust-service-security --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/hashgraph-online/awesome-codex-plugins.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/plugins/LVTD-LLC/skills/skills/rust-service-security .cursor/skills/rust-service-security && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "rust-service-security" agent skill from https://github.com/hashgraph-online/awesome-codex-plugins/tree/main/plugins/LVTD-LLC/skills/skills/rust-service-security into .cursor/skills/rust-service-security/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "rust-service-security", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/hashgraph-online/awesome-codex-plugins.git --path plugins/LVTD-LLC/skills/skills/rust-service-security--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add hashgraph-online/awesome-codex-plugins --skill rust-service-security -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install hashgraph-online/awesome-codex-plugins rust-service-security --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/hashgraph-online/awesome-codex-plugins.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/plugins/LVTD-LLC/skills/skills/rust-service-security .gemini/skills/rust-service-security && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "rust-service-security" agent skill from https://github.com/hashgraph-online/awesome-codex-plugins/tree/main/plugins/LVTD-LLC/skills/skills/rust-service-security into .gemini/skills/rust-service-security/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "rust-service-security", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install hashgraph-online/awesome-codex-plugins rust-service-securityInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add hashgraph-online/awesome-codex-plugins --skill rust-service-security -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/hashgraph-online/awesome-codex-plugins.git skills-src && mkdir -p .github/skills && cp -r skills-src/plugins/LVTD-LLC/skills/skills/rust-service-security .github/skills/rust-service-security && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "rust-service-security" agent skill from https://github.com/hashgraph-online/awesome-codex-plugins/tree/main/plugins/LVTD-LLC/skills/skills/rust-service-security into .github/skills/rust-service-security/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "rust-service-security", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add hashgraph-online/awesome-codex-plugins --skill rust-service-security -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install hashgraph-online/awesome-codex-plugins rust-service-security --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/hashgraph-online/awesome-codex-plugins.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/plugins/LVTD-LLC/skills/skills/rust-service-security .opencode/skills/rust-service-security && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "rust-service-security" agent skill from https://github.com/hashgraph-online/awesome-codex-plugins/tree/main/plugins/LVTD-LLC/skills/skills/rust-service-security into .opencode/skills/rust-service-security/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "rust-service-security", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
rust-service-security- GitHub stars
- 1.3k
- Token cost
- ~921 tokens
- SKILL.md length
- 366 words
- Files
- 5 (incl. references)
- Skills in repo
- 716
- Repo updated
- First seen
- Licence
- MIT
At a glance
A skill your agent uses when adding, changing, testing, or reviewing security-sensitive Rust web service behavior, especially login flows, password hashing, credential checks, session cookies, flash…
- Works in 8 steps: Identify the protected asset: account… → Trace the whole flow: request parsing,… → Keep secrets out of logs and debug… → …
- Reviewing security-sensitive Rust web service behavior
- SKILL.md covers Core Workflow, Password Rules, Cookie And Session Rules and Route Protection, plus 1 more section
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Rust Service Security is an agent skill from hashgraph-online/awesome-codex-plugins. Use when adding, changing, testing, or reviewing security-sensitive Rust web service behavior, especially login flows, password hashing, credential checks, session cookies, flash messages, admin route protection, auth middleware, user enumeration defenses, or moving CPU-heavy password work off async executors.
Its SKILL.md is about 920 tokens, which your agent loads only when the skill is triggered. The skill folder holds 6 other files, including reference files (for example `agents/openai.yaml`, `references/auth-middleware.md` and `references/cookies-sessions.md`). Compatibility notes: Codex, Claude Code, and other Agent Skills-compatible clients.
It sits in Backend & APIs, covering Authentication. It works with Rust. The repository describes itself as: A curated list of awesome OpenAI Codex / ChatGPT plugins, skills, and resources. The 1 Codex Marketplace. See live plugins at: https://hol.org/plugins/best-codex-plugins. The licence is MIT.
When your agent uses it
- Reviewing security-sensitive Rust web service behavior
- Especially login flows
- Password hashing
- Credential checks
Example prompts
- “/rust-service-security”
Requirements
- Compatibility (from SKILL.md): Codex, Claude Code, and other Agent Skills-compatible clients.
Workflow steps
8 steps, taken from the first numbered list in SKILL.md.
- Identify the protected asset: account access, admin area, session state,
- Trace the whole flow: request parsing, credential lookup, verification,
- Keep secrets out of logs and debug output. Use secret wrappers for passwords,
- Run password hashing and verification with memory-hard algorithms and move
- Prevent user enumeration. Failed login and password reset flows should not
- Set cookie and session attributes deliberately: HttpOnly, Secure,
- Protect routes at middleware or extractor boundaries, not by repeating
- Add tests for happy path, failed auth, missing session, forged cookie or
What it can do on your machine
Read from SKILL.md and the folder at commit 3e1456a. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are rust).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Compatibility
Codex, Claude Code, and other Agent Skills-compatible clients.
From compatibility in the SKILL.md frontmatter.
Context cost
Rust Service Security loads about 921 tokens when it runs, and up to ~1.8k if it reads all its reference files. Until then it costs about 83 tokens; SKILL.md has 366 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from hashgraph-online/awesome-codex-plugins at commit 3e1456a, republished under its MIT licence (© hashgraph-online). 366 words, ~921 tokens.
Download SKILL.mdSave it as
.claude/skills/rust-service-security/SKILL.md (or your agent's skills folder). This skill also uses 4 other files; get the full folder from GitHub.- name
- rust-service-security
- description
- Use when adding, changing, testing, or reviewing security-sensitive Rust web service behavior, especially login flows, password hashing, credential checks, session cookies, flash messages, admin route protection, auth middleware, user enumeration defenses, or moving CPU-heavy password work off async executors.
- compatibility
- Codex, Claude Code, and other Agent Skills-compatible clients.
- license
- MIT
- metadata.version
- 0.1.0
- metadata.displayName
- Rust Service Security
- metadata.category
- Rust
- metadata.tags
- rust,security,authentication,sessions,passwords
Rust Service Security
Use this skill when a Rust service handles identity, credentials, sessions, cookies, privileged routes, or sensitive user data. Prefer explicit threat checks and tests over optimistic handler code.
Core Workflow
- Identify the protected asset: account access, admin area, session state, password change, reset token, private data, or privileged operation.
- Trace the whole flow: request parsing, credential lookup, verification, session mutation, redirects/responses, logs, and tests.
- Keep secrets out of logs and debug output. Use secret wrappers for passwords, tokens, signing keys, and session secrets.
- Run password hashing and verification with memory-hard algorithms and move CPU-heavy work off async reactor threads.
- Prevent user enumeration. Failed login and password reset flows should not reveal whether the account exists.
- Set cookie and session attributes deliberately:
HttpOnly,Secure,SameSite, path, lifetime, signing/encryption, and store backend. - Protect routes at middleware or extractor boundaries, not by repeating ad-hoc checks in every handler.
- Add tests for happy path, failed auth, missing session, forged cookie or token, and logout/session rotation behavior.
Password Rules
Read references/password-auth.md before implementing or changing password
storage or verification.
- Store PHC strings produced by Argon2id or the project's chosen password hasher; never store plaintext or reversible encrypted passwords.
- Generate salts with a secure RNG.
- Use constant, generic responses for invalid credentials.
- Use
tokio::task::spawn_blockingor a dedicated blocking abstraction for expensive password operations. - Keep password hash parameters configurable enough to upgrade over time.
Show full SKILL.md (128 more words)Show less
Cookie And Session Rules
Read references/cookies-sessions.md when setting, reading, deleting, signing,
or persisting cookies and sessions.
- Never store raw credentials in cookies.
- Prefer opaque session IDs backed by a server-side store for privileged apps.
- Rotate or renew session state after login and privilege changes.
- Delete sessions server-side on logout when using a server-side store.
- Test security attributes on
Set-Cookieheaders.
Route Protection
Read references/auth-middleware.md when adding admin routes, extractors,
guards, or framework middleware.
Keep handlers typed:
pub async fn admin_dashboard(user: AuthenticatedUser) -> Result<HttpResponse, AppError> {
// Handler can assume authentication succeeded.
Ok(HttpResponse::Ok().finish())
}Avoid optional user lookups in handlers that require authentication; make the missing-user case impossible at the handler signature when the framework allows it.
Reference Files
references/password-auth.md: Argon2, PHC strings, user enumeration, and blocking password work.references/cookies-sessions.md: cookie flags, signed messages, server-side sessions, and logout.references/auth-middleware.md: route guards, extractors, and typed session access.
© hashgraph-online, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 4 other files (references) in plugins/LVTD-LLC/skills/skills/rust-service-security of hashgraph-online/awesome-codex-plugins.
- SKILL.md
- agents/openai.yaml
- references/auth-middleware.md
- references/cookies-sessions.md
- references/password-auth.md
Open the folder on GitHubat commit 3e1456a
Compare with similar skills
Rust Service Security next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Rust Service Security this skillhashgraph-online/awesome-codex-plugins | 1.3k | — | ~921 | Automated safety check: Pass | MIT | |
| Auth Architecturemajiayu000/litellm-rs | 117 | — | ~1.9k | Automated safety check: Pass | MIT | |
| Cdesktopcdesktop-ai/cdesktop | 158 | — | ~697 | Automated safety check: Pass | Apache-2.0 | |
| Agdb APIagnesoft/agdb | 143 | — | ~6k | Automated safety check: Pass | Apache-2.0 | |
| Golem Add HTTP Auth Rustgolemcloud/golem | 1.5k | — | ~565 | Automated safety check: Pass | Custom licence | |
| Azure Identity Rustaiskillstore/marketplace | 433 | 4 repos | ~952 | Automated safety check: Pass | None |
Similar skills
Cdesktop
cdesktop-ai/cdesktop
Operate the cdesktop coding-session environment — agent teams, session management, file conventions.
Agdb API
agnesoft/agdb
Navigate agdb API structure, endpoints, authentication, and client libraries.
Golem Add HTTP Auth Rust
golemcloud/golem
Enabling authentication on Rust HTTP endpoints. An agent skill from golemcloud/golem.
Azure Identity Rust
aiskillstore/marketplace
Azure Identity SDK for Rust authentication. An agent skill from aiskillstore/marketplace.
- Official
Azure Identity Rust
microsoft/skills
Azure Identity library for Rust. An agent skill from microsoft/skills.
More from hashgraph-online/awesome-codex-plugins
All 716 skills in this repoAnime Reaction Gif
hashgraph-online/awesome-codex-plugins
Create original anime-style reaction stickers as looping GIFs and MP4 previews, using generated character pose sheets and timed key poses.
Calibredb
hashgraph-online/awesome-codex-plugins
Manage and query Calibre libraries with the calibredb CLI (local paths or Calibre Content server URLs).
Rust API Test Harness
hashgraph-online/awesome-codex-plugins
A skill your agent uses when adding, changing, testing, or debugging Rust HTTP APIs and services, especially when Codex needs black-box integration tests, random-port app startup, real database test…
Art
hashgraph-online/awesome-codex-plugins
Make a studio's game look like something at build time — a cover from a real frame of the game (free), painted covers, backdrops, textures and character plates from image models through the…
Calle
hashgraph-online/awesome-codex-plugins
Use CALL-E from Codex through the calle CLI. An agent skill from hashgraph-online/awesome-codex-plugins.
Game Balance Economy
hashgraph-online/awesome-codex-plugins
Balance game difficulty, resources, rewards, probability, progression, economies, and dominant strategies.
Related
Works with
Categories
Questions about Rust Service Security
What does Rust Service Security do?
A skill your agent uses when adding, changing, testing, or reviewing security-sensitive Rust web service behavior, especially login flows, password hashing, credential checks, session cookies, flash…. Rust Service Security is an agent skill from hashgraph-online/awesome-codex-plugins. Use when adding, changing, testing, or reviewing security-sensitive Rust web service behavior, especially login flows, password hashing, credential checks, session cookies, flash messages, admin route protection, auth middleware, user enumeration defenses, or moving CPU-heavy password work off async executors.
When should I use Rust Service Security?
Rust Service Security fits situations like: reviewing security-sensitive Rust web service behavior; especially login flows; password hashing; credential checks.
How do I install Rust Service Security in Claude Code?
Run `npx skills add hashgraph-online/awesome-codex-plugins --skill rust-service-security -a claude-code`. Or copy the skill folder (plugins/LVTD-LLC/skills/skills/rust-service-security in hashgraph-online/awesome-codex-plugins) into .claude/skills/rust-service-security in your project. Claude Code loads it when a task matches its description.
How do I install Rust Service Security in Codex?
Run `npx skills add hashgraph-online/awesome-codex-plugins --skill rust-service-security -a codex`. Or copy the skill folder (plugins/LVTD-LLC/skills/skills/rust-service-security in hashgraph-online/awesome-codex-plugins) into .agents/skills/rust-service-security in your project. Codex loads it when a task matches its description.
Can I use Rust Service Security in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add hashgraph-online/awesome-codex-plugins --skill rust-service-security -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/rust-service-security, .gemini/skills/rust-service-security, .github/skills/rust-service-security and .opencode/skills/rust-service-security in your project.
What does Rust Service Security need to run?
SKILL.md names no scripts, command-line tools or credentials: Rust Service Security is instructions for the agent only. Compatibility (from SKILL.md): Codex, Claude Code, and other Agent Skills-compatible clients..
Does Rust Service Security access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Rust Service Security safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Rust Service Security use?
Rust Service Security is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Rust Service Security use?
About 921 tokens (SKILL.md is roughly 3.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 923 tokens, read only when the agent opens those files.
What are the alternatives to Rust Service Security?
Skills that share tags, products or a category with Rust Service Security: Auth Architecture (majiayu000/litellm-rs, 117 stars), Cdesktop (cdesktop-ai/cdesktop, 158 stars), Agdb API (agnesoft/agdb, 143 stars) and Golem Add HTTP Auth Rust (golemcloud/golem, 1.5k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Rust Service Security?
hashgraph-online (a GitHub organization) maintains it in hashgraph-online/awesome-codex-plugins, which has 1,267 GitHub stars. The repository holds 716 skills in this directory. The repository was last updated on October 10, 2026.
Source: hashgraph-online/awesome-codex-plugins on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.