Topic · Backend & APIs

Best authentication skills for Claude Code, Codex and other agents.

Skills that implement sign-in, sessions, tokens and single sign-on securely.
skills
646
official
45

Authentication skills, ranked

Ranked by score. Sort bymost stars,trending,newest,recently updated

Authentication skills, ranked
#SkillRepositoryStarsUsed inTokensAuto-checkLicenceUpdated
1

Hardens code against vulnerabilities. An agent skill from penpot/penpot.

penpot/penpot61k6 repos~4.7kAutomated safety check: NotesMPL-2.0today
2

ACTIVATE when the user works on authentication in Laravel. An agent skill from coollabsio/coolify.

coollabsio/coolify63k4 repos~1.9kAutomated safety check: PassMITtoday
3

General Supabase skill for database, auth, Edge Functions, Realtime and storage work, plus client libraries, migrations, security audits, debugging and reading logs.

supabase/agent-skills2.7k3 repos~3.6kAutomated safety check: PassMIT5 days ago
4

BibiGPT CLI for summarizing videos, audio, and podcasts directly in the terminal.

JimmyLv/BibiGPT-v16.2k—~885Automated safety check: PassGPL-3.05 mo ago
5

A skill your agent uses when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features.

jewbetcha/opentrace11617 repos~3.1kAutomated safety check: NotesMIT4 mo ago
6

Configure Better Auth server and client, set up database adapters, manage sessions, add plugins, and handle environment variables.

latitude-dev/latitude-llm4.7k7 repos~1.6kAutomated safety check: PassMITyesterday
7

A skill your agent uses when doing ANY task involving Supabase.

curvenote/curvenote1695 repos~2.2kAutomated safety check: PassUnknown9 days ago
8

A skill your agent uses when the user asks how code works, wants to understand architecture, trace execution flows, or explore unfamiliar parts of the codebase.

aws-samples/sample-kolya-br-proxy10611 repos~749Automated safety check: PassMIT-0yesterday
9

Builds, modifies, debugs, migrates and verifies TypeScript MCP servers and MCP Apps with the mcp-use framework, treating the installed package's types as the source of truth.

mcp-use/mcp-use11k—~923Automated safety check: PassApache-2.0today
10

Complete browser automation with Playwright. An agent skill from lackeyjb/playwright-skill.

lackeyjb/playwright-skill3.2k—~1.9kAutomated safety check: PassMIT6 days ago
11

A skill your agent uses when building real-time, bidirectional streaming applications with the Gemini Live API, or migrating legacy Live models (2.0/2.5/3.1) to Gemini 3.8 Live.

google-gemini/gemini-skills4.3k—~4.6kAutomated safety check: PassApache-2.0yesterday
12

Read and write email through the Atomic Mail from an AI agent.

Atomic-Mail/atomic-mail-agentic2661 repo~2kAutomated safety check: PassMIT9 days ago
13

Covers developing the LangBot core backend and web UI: dev setup, repo layout, API auth types, adding endpoints, migrations and keeping the MCP server in step.

langbot-app/LangBot18k—~1.4kAutomated safety check: NotesApache-2.0today
14

Crypto wallet operations via the awal CLI — sign in, check balances, send USDC/ETH/POL/SOL, trade tokens, fund the wallet, and use the x402 payment protocol to discover paid services, pay for API…

coinbase/agentic-wallet-skills1272 repos~1kAutomated safety check: PassMIT2 mo ago
15
15.Cao MCP AppsOfficial

Enable, operate, and extend CAO's MCP Apps surface — the host-rendered fleet dashboard visible inside MCP App hosts (Claude Desktop, ChatGPT, VS Code Copilot, Goose, Postman).

awslabs/cli-agent-orchestrator1.4k—~1.9kAutomated safety check: PassApache-2.0today
16
16.Teams DevOfficial

A skill your agent uses whenever the user mentions Microsoft Teams in a development context — whether they're building, integrating, configuring, debugging, or just asking questions.

microsoft/teams-sdk728—~1.2kAutomated safety check: PassMITyesterday
17

Apply bulk operations across all jwx companion modules. An agent skill from lestrrat-go/jwx.

lestrrat-go/jwx2.4k—~1.9kAutomated safety check: PassMITtoday
18

This skill should be used when building, modifying, or debugging a react-admin application — including creating resources, lists, forms, data fetching, authentication, relationships between…

Awesome-Technologies/synapse-admin1.2k—~2.6kAutomated safety check: PassApache-2.019 days ago
19

Build or troubleshoot portal JSON/native login clients, refresh, profile and admin APIs, and public JWKS.

greenpau/caddy-security2.3k—~2.9kAutomated safety check: PassApache-2.02 days ago
20

Operate SonarQube-enabled repositories through the SonarQube CLI (sonar): verify authentication, discover project keys, inspect project metadata, issues, measures, and quality gates, analyze changed…

DougTrajano/pydantic-ai-skills377—~2.2kAutomated safety check: PassMIT3 days ago
21

Builds Laravel 10+ applications with Eloquent models, Sanctum authentication, Horizon queues, API resources and Livewire components, tested with Pest or PHPUnit.

Jeffallan/claude-skills12k1 repo~2.1kAutomated safety check: PassMIT4 days ago
22

Checklist-driven security review for changes to authentication, authorization, MFA, secrets, input validation and other security-critical code.

ZeroDeng01/sublinkPro1.7k—~2.3kAutomated safety check: PassMIT2 days ago
23

Verify that code changes do not introduce OAuth security vulnerabilities.

doorkeeper-gem/doorkeeper5.5k—~1.4kAutomated safety check: PassMITyesterday
24

Builds REST APIs using respondto blocks with Jbuilder templates following the 37signals same-controllers-different-formats philosophy.

dilolabs/nosia2131 repo~2.5kAutomated safety check: PassMIT28 days ago
25

AWS Cognito user authentication and authorization service. An agent skill from itsmostafa/aws-agent-skills.

itsmostafa/aws-agent-skills1.2k1 repo~2.3kAutomated safety check: PassMITyesterday
26

Connects an OAuth 2.0 account such as Gmail with the built-in oauth_authorize tool: an authorization link, automatic code capture and sealed token storage.

spinabot/brigade11k—~878Automated safety check: PassMIT4 days ago
27

Create and maintain Hurl tests for Dolibarr ERP/CRM. An agent skill from Dolibarr/dolibarr.

Dolibarr/dolibarr7.7k—~3.7kAutomated safety check: PassGPL-3.0today
28

Guide for developing Go applications with github.com/lestrrat-go/jwx v4 — parse/sign JWTs, work with JWS/JWE/JWK, pick algorithms, and avoid the common footguns.

lestrrat-go/jwx2.4k—~5.3kAutomated safety check: PassMITtoday
29

A skill your agent uses when writing or editing any prose in this repository - the book's preface, its chapters and epilogue, the brand kit notes, the agent skill documents, the changelog, and the…

kataras/jwt212—~1.9kAutomated safety check: PassMIT24 days ago
30

Run CodeRabbit CLI reviews, retrieve saved local or GitHub PR fix prompts, and interpret CodeRabbit authentication and review output.

coderabbitai/skills188—~1.9kAutomated safety check: PassMITtoday
31

Query or explain direct Netdata Agent APIs and Functions; review direct-query recipes or helpers; troubleshoot bearer authentication.

netdata/netdata81k—~2kAutomated safety check: NotesGPL-3.0today
32

Read, send, search, and manage Slack workspaces with the slackcli binary.

shaharia-lab/slackcli227—~1.6kAutomated safety check: PassMIT3 days ago
33

Battle-tested Playwright patterns for writing and debugging reliable E2E, API, component, visual, accessibility, and security tests.

testdino-hq/playwright-skill3851 repo~1.4kAutomated safety check: PassMIT1 mo ago
34

RealSenseID face authentication SDK reference. An agent skill from realsenseai/RealSenseID.

realsenseai/RealSenseID122—~4.1kAutomated safety check: PassApache-2.021 days ago
35

Scaffold and implement authentication in TypeScript/JavaScript apps using Better Auth.

deadlock-mod-manager/deadlock-mod-manager4734 repos~3.4kAutomated safety check: PassGPL-3.0today
36

Integrates MetaMask Embedded Wallets (Web3Auth) for non-custodial wallets via social login or custom JWT (Firebase, Auth0, Cognito).

Web3Auth/web3auth-examples144—~1.4kAutomated safety check: PassMIT4 days ago
37

Build or review caddy-security Caddyfiles and select focused configuration skills.

greenpau/caddy-security2.3k—~2.6kAutomated safety check: PassApache-2.02 days ago
38

Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems.

ynulihao/AgentSkillOS6179 repos~4.4kAutomated safety check: PassNo licence7 mo ago
39

Implements custom passwordless authentication without Devise.

dilolabs/nosia2131 repo~2.9kAutomated safety check: PassMIT28 days ago
40
40.Zele

zele is a multi-account email and calendar CLI for Gmail, IMAP/SMTP (Fastmail, Outlook, any provider), and Google Calendar.

remorses/zele299—~1.3kAutomated safety check: PassNo licence6 days ago
41

Manages OAuth social authentication with Laravel Socialite. An agent skill from hexlet-volunteers/hexlet-sicp.

hexlet-volunteers/hexlet-sicp1145 repos~1.2kAutomated safety check: PassMIT2 days ago
42

Client Credentials Flow for service-to-service (daemon) authentication in MSAL.NET without user involvement

AzureAD/microsoft-authentication-library-for-dotnet1.5k—~1.1kAutomated safety check: PassMITtoday
43

Drive the AuthEndpoints HTTP API via the in-repo test host (cookie sessions, Identity bearer, Simple JWT, CSRF, ReAuth).

madeyoga/AuthEndpoints121—~2.6kAutomated safety check: PassMIT3 days ago
44

Publish Markdown articles and Bifrost capability series to Juejin, or verify with Microsoft Edge that a published Juejin page's title and body match the local Markdown.

bifrost-proxy/bifrost160—~1.7kAutomated safety check: PassMITyesterday
45

A skill your agent uses whenever the user needs to log in to a website on their phone and reuse that authenticated session locally, especially for Playwright storageState JSON, cookies/localStorage…

Lakr233/Cookey160—~3.7kAutomated safety check: PassMIT4 mo ago
46

A skill your agent uses when implementing GitHub OAuth + GitHub App authentication with Nango - provides two-connection pattern for user login and repo access with webhook handling

AgentWorkforce/relay8651 repo~3.4kAutomated safety check: PassApache-2.0today
47

Run E2E browser tests on any web application using Glance MCP.

DebugBase/glance156—~827Automated safety check: PassMIT5 mo ago
48
48.Bdg

Use bdg CLI to drive and debug a real Chrome via Chrome DevTools Protocol - navigate, click, fill and submit forms, check what an action changed (navigation, new messages, pending requests), inspect…

szymdzum/browser-debugger-cli152—~2.5kAutomated safety check: PassMITtoday

Questions, answered from the data.

What is the best authentication skill?

Security And Hardening from penpot/penpot ranks first of the 646 authentication skills listed here, with the highest score: its repository has 61k GitHub stars, 6 other GitHub owners carry a copy, its SKILL.md loads about 4.7k tokens and it has informational notes only in the automated safety check. Next come Fortify Development and Supabase Development and Debugging.

Which authentication skills are official?

45 of the 646 authentication skills are official, published by the vendor's own GitHub organization: Supabase Development and Debugging, Gitnexus Exploring, Gemini Live API Dev, Cao MCP Apps, Teams Dev and 40 more.

How are these skills ranked?

By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.