maxwell2732/claudecode-research-harness-workflow/auth

Claude Code and agent skill by maxwell2732/claudecode-research-harness-workflow

Trust tier 3
  • community
Source check pending

Checking that the SKILL.md file is still in the repository.

Explicit helper for authentication and payment implementation with Clerk, Supabase Auth, or Stripe. Do NOT load for: general UI work, database design, or non-auth features.

Install

npx vskill@latest install maxwell2732/claudecode-research-harness-workflow/auth

SKILL.md

Auth Skills

A set of skills responsible for implementing authentication and payment features.

Feature Details

FeatureDetails
AuthenticationSee references/authentication.md
PaymentsSee references/payments.md

Execution Steps

  1. Quality gate (Step 0)
  2. Classify the user's request (authentication or payments)
  3. Read the appropriate reference file from "Feature Details" above
  4. Implement following its instructions
Step 0: Quality Gate (Security Checklist)

Since authentication and payment features always carry high security risk, always display the following before starting work:

markdown
🔐 Security Checklist
 
This work is security-critical. Please confirm the following:
 
### Authentication
-[ ] Passwords are hashed (bcrypt/argon2)
-[ ] Session management is secure (HTTPOnly Cookie)
-[ ] CSRF protection is implemented
-[ ] Rate limiting (brute-force protection)
 
### Payments
-[ ] Sensitive data (card numbers, etc.) is not stored on the server
-[ ] Stripe/payment provider SDK is used correctly
-[ ] Webhook signature verification
-[ ] Amount tampering prevention (amount finalized server-side)
 
### Common
-[ ] Error messages are not overly detailed (prevent information leakage)
-[ ] Sensitive information is not written to logs
Security Severity Display
markdown
⚠️ Caution Level: 🔴 High
 
This feature carries the following risks:
-Credential exposure
-Unauthorized access
-Fraudulent payment manipulation
 
Expert review is recommended.
For VibeCoder
markdown
🔐 Building login and payment features safely
 
1.**"Hash" passwords**
   -Store passwords in a form that cannot be reversed
   -Safe even if data is leaked
 
2.**Do not store card information on your server**
   -Delegate to a dedicated service like Stripe
   -Never store anything on your own server
 
3.**Keep error messages vague**
   -Use "Authentication failed" instead of "Password is incorrect"
   -Don't give hints to malicious actors

Security

  • Security scanPassed, 90 of 100Pattern checks on the skill's files.
  • Model reviewPassed

See the full security report

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

Popularity

7-day trend score
5

Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/maxwell2732/claudecode-research-harness-workflow/auth/badge)](https://verified-skill.com/skills/maxwell2732/claudecode-research-harness-workflow/auth)

Something wrong with this skill or its page? Tell us.