Authentication
Skill kimtth/agent-skill-100-lines-or-less/skills/authentication
🧿 Minimal but effective AI agent skill definitions in 100 lines or less.
npx -y skills add kimtth/agent-skill-100-lines-or-less --skill authenticationAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Use when: implement or review authentication flows, sessions, tokens, and password handling securely.
SKILL.md
1.1 KB, as published. Nobody here has run it
Goal: verify identity safely without leaking or mishandling credentials.
Use for:
- login, signup, and session management
- choosing between sessions and tokens
- reviewing password storage and flow security
Workflow:
- Choose a mechanism: server sessions or signed tokens (JWT).
- Hash passwords with a strong adaptive function (bcrypt/argon2).
- Issue, store, and expire credentials securely.
- Protect against brute force with rate limits and lockouts.
- Support secure logout and token revocation.
- Verify flows against common attacks before shipping.
Patterns:
- httpOnly, Secure, SameSite cookies for sessions
- short-lived access tokens with refresh rotation
- MFA for sensitive accounts
- constant-time comparison for secrets
Rules:
- never store passwords in plaintext or with fast hashes
- never log credentials or tokens
- always use TLS for credential transport
- expire and rotate tokens; support revocation