Topic · Backend & APIs
Best authentication skills for Claude Code, Codex and other agents.
- skills
- 646
- official
- 45
Authentication skills, ranked
Ranked by score. Sort bymost stars,trending,newest,recently updated
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Hardens code against vulnerabilities. An agent skill from penpot/penpot. | penpot/ | 61k | 6 repos | ~4.7k | Automated safety check: Notes | MPL-2.0 | today |
| 2 | ACTIVATE when the user works on authentication in Laravel. An agent skill from coollabsio/coolify. | coollabsio/ | 63k | 4 repos | ~1.9k | Automated safety check: Pass | MIT | today |
| 3 | General Supabase skill for database, auth, Edge Functions, Realtime and storage work, plus client libraries, migrations, security audits, debugging and reading logs. | supabase/ | 2.7k | 3 repos | ~3.6k | Automated safety check: Pass | MIT | 5 days ago |
| 4 | 4.Bibi BibiGPT CLI for summarizing videos, audio, and podcasts directly in the terminal. | JimmyLv/ | 6.2k | — | ~885 | Automated safety check: Pass | GPL-3.0 | 5 mo ago |
| 5 | A skill your agent uses when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. | jewbetcha/ | 116 | 17 repos | ~3.1k | Automated safety check: Notes | MIT | 4 mo ago |
| 6 | Configure Better Auth server and client, set up database adapters, manage sessions, add plugins, and handle environment variables. | latitude-dev/ | 4.7k | 7 repos | ~1.6k | Automated safety check: Pass | MIT | yesterday |
| 7 | 7.Supabase A skill your agent uses when doing ANY task involving Supabase. | curvenote/ | 169 | 5 repos | ~2.2k | Automated safety check: Pass | Unknown | 9 days ago |
| 8 | A skill your agent uses when the user asks how code works, wants to understand architecture, trace execution flows, or explore unfamiliar parts of the codebase. | aws-samples/ | 106 | 11 repos | ~749 | Automated safety check: Pass | MIT-0 | yesterday |
| 9 | Builds, modifies, debugs, migrates and verifies TypeScript MCP servers and MCP Apps with the mcp-use framework, treating the installed package's types as the source of truth. | mcp-use/ | 11k | — | ~923 | Automated safety check: Pass | Apache-2.0 | today |
| 10 | Complete browser automation with Playwright. An agent skill from lackeyjb/playwright-skill. | lackeyjb/ | 3.2k | — | ~1.9k | Automated safety check: Pass | MIT | 6 days ago |
| 11 | A skill your agent uses when building real-time, bidirectional streaming applications with the Gemini Live API, or migrating legacy Live models (2.0/2.5/3.1) to Gemini 3.8 Live. | google-gemini/ | 4.3k | — | ~4.6k | Automated safety check: Pass | Apache-2.0 | yesterday |
| 12 | 12.Atomicmail Read and write email through the Atomic Mail from an AI agent. | Atomic-Mail/ | 266 | 1 repo | ~2k | Automated safety check: Pass | MIT | 9 days ago |
| 13 | Covers developing the LangBot core backend and web UI: dev setup, repo layout, API auth types, adding endpoints, migrations and keeping the MCP server in step. | langbot-app/ | 18k | — | ~1.4k | Automated safety check: Notes | Apache-2.0 | today |
| 14 | Crypto wallet operations via the awal CLI — sign in, check balances, send USDC/ETH/POL/SOL, trade tokens, fund the wallet, and use the x402 payment protocol to discover paid services, pay for API… | coinbase/ | 127 | 2 repos | ~1k | Automated safety check: Pass | MIT | 2 mo ago |
| 15 | Enable, operate, and extend CAO's MCP Apps surface — the host-rendered fleet dashboard visible inside MCP App hosts (Claude Desktop, ChatGPT, VS Code Copilot, Goose, Postman). | awslabs/ | 1.4k | — | ~1.9k | Automated safety check: Pass | Apache-2.0 | today |
| 16 | A skill your agent uses whenever the user mentions Microsoft Teams in a development context — whether they're building, integrating, configuring, debugging, or just asking questions. | microsoft/ | 728 | — | ~1.2k | Automated safety check: Pass | MIT | yesterday |
| 17 | Apply bulk operations across all jwx companion modules. An agent skill from lestrrat-go/jwx. | lestrrat-go/ | 2.4k | — | ~1.9k | Automated safety check: Pass | MIT | today |
| 18 | 18.React Admin This skill should be used when building, modifying, or debugging a react-admin application — including creating resources, lists, forms, data fetching, authentication, relationships between… | Awesome-Technologies/ | 1.2k | — | ~2.6k | Automated safety check: Pass | Apache-2.0 | 19 days ago |
| 19 | Build or troubleshoot portal JSON/native login clients, refresh, profile and admin APIs, and public JWKS. | greenpau/ | 2.3k | — | ~2.9k | Automated safety check: Pass | Apache-2.0 | 2 days ago |
| 20 | 20.Sonarqube Operate SonarQube-enabled repositories through the SonarQube CLI (sonar): verify authentication, discover project keys, inspect project metadata, issues, measures, and quality gates, analyze changed… | DougTrajano/ | 377 | — | ~2.2k | Automated safety check: Pass | MIT | 3 days ago |
| 21 | Builds Laravel 10+ applications with Eloquent models, Sanctum authentication, Horizon queues, API resources and Livewire components, tested with Pest or PHPUnit. | Jeffallan/ | 12k | 1 repo | ~2.1k | Automated safety check: Pass | MIT | 4 days ago |
| 22 | Checklist-driven security review for changes to authentication, authorization, MFA, secrets, input validation and other security-critical code. | ZeroDeng01/ | 1.7k | — | ~2.3k | Automated safety check: Pass | MIT | 2 days ago |
| 23 | Verify that code changes do not introduce OAuth security vulnerabilities. | doorkeeper-gem/ | 5.5k | — | ~1.4k | Automated safety check: Pass | MIT | yesterday |
| 24 | 24.API Patterns Builds REST APIs using respondto blocks with Jbuilder templates following the 37signals same-controllers-different-formats philosophy. | dilolabs/ | 213 | 1 repo | ~2.5k | Automated safety check: Pass | MIT | 28 days ago |
| 25 | 25.Cognito AWS Cognito user authentication and authorization service. An agent skill from itsmostafa/aws-agent-skills. | itsmostafa/ | 1.2k | 1 repo | ~2.3k | Automated safety check: Pass | MIT | yesterday |
| 26 | Connects an OAuth 2.0 account such as Gmail with the built-in oauth_authorize tool: an authorization link, automatic code capture and sealed token storage. | spinabot/ | 11k | — | ~878 | Automated safety check: Pass | MIT | 4 days ago |
| 27 | Create and maintain Hurl tests for Dolibarr ERP/CRM. An agent skill from Dolibarr/dolibarr. | Dolibarr/ | 7.7k | — | ~3.7k | Automated safety check: Pass | GPL-3.0 | today |
| 28 | 28.Jwx Guide V4 Guide for developing Go applications with github.com/lestrrat-go/jwx v4 — parse/sign JWTs, work with JWS/JWE/JWK, pick algorithms, and avoid the common footguns. | lestrrat-go/ | 2.4k | — | ~5.3k | Automated safety check: Pass | MIT | today |
| 29 | A skill your agent uses when writing or editing any prose in this repository - the book's preface, its chapters and epilogue, the brand kit notes, the agent skill documents, the changelog, and the… | kataras/ | 212 | — | ~1.9k | Automated safety check: Pass | MIT | 24 days ago |
| 30 | 30.Code Review Run CodeRabbit CLI reviews, retrieve saved local or GitHub PR fix prompts, and interpret CodeRabbit authentication and review output. | coderabbitai/ | 188 | — | ~1.9k | Automated safety check: Pass | MIT | today |
| 31 | Query or explain direct Netdata Agent APIs and Functions; review direct-query recipes or helpers; troubleshoot bearer authentication. | netdata/ | 81k | — | ~2k | Automated safety check: Notes | GPL-3.0 | today |
| 32 | 32.Slackcli Read, send, search, and manage Slack workspaces with the slackcli binary. | shaharia-lab/ | 227 | — | ~1.6k | Automated safety check: Pass | MIT | 3 days ago |
| 33 | Battle-tested Playwright patterns for writing and debugging reliable E2E, API, component, visual, accessibility, and security tests. | testdino-hq/ | 385 | 1 repo | ~1.4k | Automated safety check: Pass | MIT | 1 mo ago |
| 34 | 34.Rsid SDK RealSenseID face authentication SDK reference. An agent skill from realsenseai/RealSenseID. | realsenseai/ | 122 | — | ~4.1k | Automated safety check: Pass | Apache-2.0 | 21 days ago |
| 35 | Scaffold and implement authentication in TypeScript/JavaScript apps using Better Auth. | deadlock-mod-manager/ | 473 | 4 repos | ~3.4k | Automated safety check: Pass | GPL-3.0 | today |
| 36 | 36.Web3auth Integrates MetaMask Embedded Wallets (Web3Auth) for non-custodial wallets via social login or custom JWT (Firebase, Auth0, Cognito). | Web3Auth/ | 144 | — | ~1.4k | Automated safety check: Pass | MIT | 4 days ago |
| 37 | Build or review caddy-security Caddyfiles and select focused configuration skills. | greenpau/ | 2.3k | — | ~2.6k | Automated safety check: Pass | Apache-2.0 | 2 days ago |
| 38 | Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. | ynulihao/ | 617 | 9 repos | ~4.4k | Automated safety check: Pass | No licence | 7 mo ago |
| 39 | 39.Auth Setup Implements custom passwordless authentication without Devise. | dilolabs/ | 213 | 1 repo | ~2.9k | Automated safety check: Pass | MIT | 28 days ago |
| 40 | 40.Zele zele is a multi-account email and calendar CLI for Gmail, IMAP/SMTP (Fastmail, Outlook, any provider), and Google Calendar. | remorses/ | 299 | — | ~1.3k | Automated safety check: Pass | No licence | 6 days ago |
| 41 | Manages OAuth social authentication with Laravel Socialite. An agent skill from hexlet-volunteers/hexlet-sicp. | hexlet-volunteers/ | 114 | 5 repos | ~1.2k | Automated safety check: Pass | MIT | 2 days ago |
| 42 | Client Credentials Flow for service-to-service (daemon) authentication in MSAL.NET without user involvement | AzureAD/ | 1.5k | — | ~1.1k | Automated safety check: Pass | MIT | today |
| 43 | Drive the AuthEndpoints HTTP API via the in-repo test host (cookie sessions, Identity bearer, Simple JWT, CSRF, ReAuth). | madeyoga/ | 121 | — | ~2.6k | Automated safety check: Pass | MIT | 3 days ago |
| 44 | Publish Markdown articles and Bifrost capability series to Juejin, or verify with Microsoft Edge that a published Juejin page's title and body match the local Markdown. | bifrost-proxy/ | 160 | — | ~1.7k | Automated safety check: Pass | MIT | yesterday |
| 45 | A skill your agent uses whenever the user needs to log in to a website on their phone and reuse that authenticated session locally, especially for Playwright storageState JSON, cookies/localStorage… | Lakr233/ | 160 | — | ~3.7k | Automated safety check: Pass | MIT | 4 mo ago |
| 46 | A skill your agent uses when implementing GitHub OAuth + GitHub App authentication with Nango - provides two-connection pattern for user login and repo access with webhook handling | AgentWorkforce/ | 865 | 1 repo | ~3.4k | Automated safety check: Pass | Apache-2.0 | today |
| 47 | 47.Glance Test Run E2E browser tests on any web application using Glance MCP. | DebugBase/ | 156 | — | ~827 | Automated safety check: Pass | MIT | 5 mo ago |
| 48 | 48.Bdg Use bdg CLI to drive and debug a real Chrome via Chrome DevTools Protocol - navigate, click, fill and submit forms, check what an action changed (navigation, new messages, pending requests), inspect… | szymdzum/ | 152 | — | ~2.5k | Automated safety check: Pass | MIT | today |
Questions, answered from the data.
What is the best authentication skill?
Security And Hardening from penpot/penpot ranks first of the 646 authentication skills listed here, with the highest score: its repository has 61k GitHub stars, 6 other GitHub owners carry a copy, its SKILL.md loads about 4.7k tokens and it has informational notes only in the automated safety check. Next come Fortify Development and Supabase Development and Debugging.
Which authentication skills are official?
45 of the 646 authentication skills are official, published by the vendor's own GitHub organization: Supabase Development and Debugging, Gitnexus Exploring, Gemini Live API Dev, Cao MCP Apps, Teams Dev and 40 more.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.
Explore related skills
Category
More topics in Backend & APIs
- Backend development928
- REST APIs783
- Authorization and RBAC519
- OAuth and OpenID Connect482
- Webhooks460
- OpenAPI specifications439
- Smart contracts404
- Third-party API integration348
- GraphQL343
- Caching327
- Event-driven systems311
- Microservices303
- API design281
- Realtime and WebSockets277
- File uploads and storage276
- Rate limiting257
- Serverless229
- Transactional email165
- Background jobs156
- gRPC and Protobuf149
- Search implementation117
- Multi-tenancy93
- Payments and billing57