himself65/auth-spec

Perfil de himself65

Última actividad de origen registrada: 9 de octubre de 2026 a las 11:54

Catálogo de SkillsMP actualizado: 26 de octubre de 2026 a las 11:37

skills recopiladas: 2

Estrellas en GitHub: 41
Forks en GitHub: 3

README del repositorio

Archivo de origen del README: README.md

Leer el README original

Mostrar README completo

# auth-spec A toolkit that helps you **build authentication from scratch**, following the [Agent Skills](https://agentskills.io) open standard. ## Quick Start ### Claude Code — Plugin (recommended) ```bash npx plugins add himself65/auth-spec ``` ### Claude Code — Individual Skills ```bash npx skills add himself65/auth-spec ``` ### Other Agents ```bash npx skills add himself65/auth-spec -a <agent-name> ``` ## What is this? When you build a web app, users need to sign up, sign in, and sign out. This project provides **Claude Code skills** that can generate auth code for you as a starting point. It works with **any language or framework** — TypeScript, Python, Go, Rust, Kotlin, and more. ## Why build auth from scratch? This project follows a simple rule: **write your own auth code**. No plug-and-play auth libraries like NextAuth, Passport, or Lucia. You only need three things: - A **web framework** (Express, Next.js, FastAPI, etc.) - A **database library** (Prisma, Drizzle, SQLAlchemy, etc.) - A **password hashing library** (bcrypt, argon2, etc.) Writing auth yourself helps you understand how it actually works — password hashing, sessions, cookies, and security best practices. ## Available Skills | Skill | Description | Platform | |---|---|---| | [create-auth](skills/create-auth/) | Scaffold sign-up, sign-in, session, and sign-out endpoints with security best practices | All | | [security-best-practice](skills/security-best-practice/) | Audit and harden your auth code against OWASP top 10 and common security pitfalls | All | ## Evals Changes to the skills are measured, not eyeballed: [`evals/`](evals/) holds a `claude plugin eval` suite of planted-vulnerability audits, scaffolding tasks and false-positive/trigger controls. Before changing a skill, run `pnpm eval:compare` locally: it scores the base branch and your working tree on the same cases and flags any regression. See [`evals/README.md`](evals/README.md). ## License MIT

Cargando el README del repositorio…

Skills en este repositorio

clasificación pendiente

skill

ocupación

descripción

actualizado

security-best-practice

sin clasificar

Audit and harden authentication code for security best practices. Use when the user wants to check their auth implementation for vulnerabilities, harden session handling, fix credential storage, validate OAuth/OIDC flows, add MFA/passkeys, or apply…

Idioma del texto original: inglés

2026-10-09

create-auth

sin clasificar

Scaffold signin and signup authentication endpoints for a project. Use when the user wants to add authentication, create login/register flows, or set up auth from scratch.

Idioma del texto original: inglés

2026-10-09

Mostrando 2 de 2 skills recopiladas.

Instalar con un asistente de IA

Copia este prompt en el asistente de IA que estés usando.

Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/himself65/auth-spec.