Auth Security

Name: auth-security
Author: majiayu000

majiayu000/spellbook

OAuth 2.1 + JWT authentication security best practices. Use when implementing auth, API authorization, token management. Follows RFC 9700 (2025).

★ 253 Synced 4 hours ago View SKILL.md

At a glance

Coding Manual install Python Actively maintained

This skill is for Coding and helps you implement oauth 2.1 authentication, manage jwt tokens securely, and set up api authorization.

Install

git clone --depth 1 https://github.com/majiayu000/spellbook
cp -r spellbook/skills/auth-security ~/.claude/skills/auth-security

Can use Not declared by the author

Good for implement oauth 2.1 authenticationmanage jwt tokens securelyset up api authorizationconfigure token refresh flowsaudit authentication securitydesign secure auth systems

Setup, runtime and requirements describe majiayu000/spellbook, the repo this skill ships in.

oauth jwt api-security Rfc 9700 access-control Token Management

Also in majiayu000/spellbook

View the repo

Agentsmd Optimize Productivity

Audit AND optimize a CLAUDE.md / AGENTS.md instruction file — score it against the five high-leverage patterns, flag anti-patterns, then app...

Agentsmd Scaffold Legal

Generate or update repository-specific AGENTS.md instruction files from real repo evidence. Use when asked to create, design, scaffold, spli...

API Design Legal

REST/GraphQL/gRPC API design best practices. Use when designing APIs, defining contracts, handling versioning. Covers OpenAPI 3.2, GraphQL F...

App UI Design Design

Mobile app UI design expert for iOS and Android. Use when designing app interfaces, creating design systems, ensuring accessibility, or foll...

App User Story Qa Code Review & Testing

End-to-end app feature inventory and user-story testing workflow with a canonical tracker. Use when the user asks to audit every feature, de...

Architecture Foundation Legal

Design architecture foundations before implementation. Use when asked to design or refactor architecture, choose Rust/Go crate, package, mod...

Ask Opencli Productivity

Ask Grok or Gemini via opencli (browser-session based, no API cost). Use when the user says "问 grok", "问 gemini", "ask grok", "ask gemini"...

Capability Distill Productivity

能力蒸馏工作流——从用户批准的强模型访谈或真实任务轨迹中提取非显然的判断规则，形成可审计的 judgment packet，再交给 skill-audit 和 skill-creato...

Clash Doctor DevOps & Infrastructure

Clash Verge 诊断与配置管理。网络诊断、配置 AI 工具路由规则（Claude/Codex/Cursor/Warp）、查看/克隆订阅配置、切换配置文件。当用户遇到网络问题...

Clash Routes DevOps & Infrastructure

查看指定进程的代理线路。通过 Mihomo API 查询当前活跃连接，显示进程匹配的规则和代理链路。用于确认某个进程（如 claude、chrome）走的是哪条订阅...

Claude Code Reverse Code Review & Testing

对用户拥有或明确获授权的本机可执行文件、应用二进制和版本产物做只读静态逆向，包括 Claude Code 及其他 CLI、Mach-O、ELF、PE、Wasm 或打包应用。...

Cliproxy Newapi Stack DevOps & Infrastructure

在已经过独立验证的 CLIProxyAPI upstream 之上部署 NewAPI 计费层，把 Codex/Claude/Gemini/Qwen 等订阅账号包装成可计费的 OpenAI 兼容 API。本 Ski...

Other Coding skills

Karpathy Guidelines multica-ai/andrej-karpathy-skills

Behavioral guidelines to reduce common LLM coding mistakes. Use when writing, reviewing, or refactoring code to avoid overcomplication, make...

Webapp Testing anthropics/skills

Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI be...

MCP Builder anthropics/skills

Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-design...

Claude API anthropics/skills

Reference for the Claude API / Anthropic SDK — model ids, pricing, params, streaming, tool use, MCP, agents, caching, token counting, model...

Web Artifacts Builder anthropics/skills

Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS,...

Request Refactor Plan mattpocock/skills

Create a detailed refactor plan with tiny commits via user interview, then file it as a GitHub issue. Use when user wants to plan a refactor...