himself65/auth-spec

himself65-Profil

Letzte erfasste Quellaktivität: 9. Oktober 2026 um 11:54

SkillsMP-Katalog aktualisiert: 26. Oktober 2026 um 11:37

gesammelte Skills: 2

GitHub-Stars: 41
GitHub-Forks: 3

README des Repositorys

README-Quelldatei: README.md

README-Quelldatei lesen

Vollständige README anzeigen

# auth-spec A toolkit that helps you **build authentication from scratch**, following the [Agent Skills](https://agentskills.io) open standard. ## Quick Start ### Claude Code — Plugin (recommended) ```bash npx plugins add himself65/auth-spec ``` ### Claude Code — Individual Skills ```bash npx skills add himself65/auth-spec ``` ### Other Agents ```bash npx skills add himself65/auth-spec -a <agent-name> ``` ## What is this? When you build a web app, users need to sign up, sign in, and sign out. This project provides **Claude Code skills** that can generate auth code for you as a starting point. It works with **any language or framework** — TypeScript, Python, Go, Rust, Kotlin, and more. ## Why build auth from scratch? This project follows a simple rule: **write your own auth code**. No plug-and-play auth libraries like NextAuth, Passport, or Lucia. You only need three things: - A **web framework** (Express, Next.js, FastAPI, etc.) - A **database library** (Prisma, Drizzle, SQLAlchemy, etc.) - A **password hashing library** (bcrypt, argon2, etc.) Writing auth yourself helps you understand how it actually works — password hashing, sessions, cookies, and security best practices. ## Available Skills | Skill | Description | Platform | |---|---|---| | [create-auth](skills/create-auth/) | Scaffold sign-up, sign-in, session, and sign-out endpoints with security best practices | All | | [security-best-practice](skills/security-best-practice/) | Audit and harden your auth code against OWASP top 10 and common security pitfalls | All | ## Evals Changes to the skills are measured, not eyeballed: [`evals/`](evals/) holds a `claude plugin eval` suite of planted-vulnerability audits, scaffolding tasks and false-positive/trigger controls. Before changing a skill, run `pnpm eval:compare` locally: it scores the base branch and your working tree on the same cases and flags any regression. See [`evals/README.md`](evals/README.md). ## License MIT

README des Repositorys wird geladen…

Skills in diesem Repository

Klassifizierung ausstehend

Skill

Beruf

Beschreibung

Aktualisiert

security-best-practice

nicht klassifiziert

Audit and harden authentication code for security best practices. Use when the user wants to check their auth implementation for vulnerabilities, harden session handling, fix credential storage, validate OAuth/OIDC flows, add MFA/passkeys, or apply…

Quellsprache: Englisch

2026-10-09

create-auth

nicht klassifiziert

Scaffold signin and signup authentication endpoints for a project. Use when the user wants to add authentication, create login/register flows, or set up auth from scratch.

Quellsprache: Englisch

2026-10-09

Es werden 2 von 2 gesammelten Skills angezeigt.

Mit einem KI-Assistenten installieren

Diesen Prompt kopieren und in den verwendeten KI-Assistenten einfügen.

Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/himself65/auth-spec.