Autenticació
Autenticació i autorització
claude-code-plugins
melodic-software
"Verify or configure Context7 for this plugin's lookups. Check the ctx7 CLI, CONTEXT7_API_KEY auth, and the Context7 MCP server, then install/upgrade the CLI on request. Use when the user wants Context7 set up, verified, or repaired on this machine, covering CLI installation, API-key auth, and MCP server wiring: 'set up context7', 'is context7 working', 'install ctx7'. Actions: check (read-only verification, default) apply (resolve what check found) apply install-cli (also install/upgrade the ctx7 CLI)."
spring-boot-security-jwt
giuseppe-trisciuoglio
Provides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.
qa-planning
WellApp-ai
Generate QA Contract with numbered Gherkin scenarios (G#N) and acceptance criteria (AC#N)
notion-sync
WellApp-ai
Standardize Notion task updates across all modes
agent-browser
xuiltul
Headless browser automation CLI. Open, browse, interact with, and screenshot web pages. Use when: opening websites, browser-based login, web app testing, taking screenshots, UI verification.
packages
meteor
Use when exploring the package ecosystem, finding which package handles a feature, understanding package relationships, or adding dependencies. Lists all core packages by domain.
project-planner
mgiovani
Break down large projects into dependency-aware tasks with progress tracking
critical-interval-security-checker
ArabelaTso
Analyzes code to identify security-critical time intervals and timing vulnerabilities in authentication, authorization, and time-sensitive security operations. Use this skill when reviewing code for proper timeout enforcement, token expiration, session management, rate limiting, password reset validity, or any time-sensitive security mechanism. Detects missing expiration checks, excessive timeout values, lack of rate limiting, client-side only validation, hardcoded timeouts, and timing attack vulnerabilities. Triggers when users ask to check security timeouts, verify token expiration handling, audit session timeout implementation, review rate limiting, or analyze time-based security controls.
agent-browser
ArabelaTso
CLI-based browser automation with persistent page state using ref-based element interaction. Use when users ask to navigate websites, interact with web pages, fill forms, take screenshots, test web applications, or extract information from web pages.
api-request-builder
proflead
Build a basic HTTP request (curl or fetch) for an API. Use when a junior developer needs a quick request example.
project-specification
athola
"Transform project briefs into testable specifications with acceptance criteria. Use for requirements translation, spec creation, pre-implementation. Skip if spec exists or still exploring."
react-admin
marmelab
This skill should be used when building, modifying, or debugging a react-admin application — including creating resources, lists, forms, data fetching, authentication, relationships between entities, custom pages, or any CRUD admin interface built with react-admin.
qwen-delegation
athola
Qwen CLI delegation workflow implementing delegation-core for Alibaba's
mission-orchestrator
athola
'Unified lifecycle orchestrator for attune project development. Auto-detects
delegation-core
athola
Delegate tasks to external LLM services (Gemini, Qwen) with quota, logging,
clear-context
athola
'Automatic context management with graceful handoff to continuation subagent.
gemini-delegation
athola
Gemini CLI delegation workflow implementing delegation-core for Google's
security-by-design
Hack23
Threat modeling before coding, STRIDE methodology, defense in depth, security controls in SDLC
access-control-policy
Hack23
Identity and access management: RBAC, least privilege, MFA, quarterly reviews per ISO 27001 A.5.15, A.8.2, A.8.3
crypto-best-practices
Hack23
Implement strong encryption, secure hashing, and proper key management following NIST and OWASP cryptography guidelines
developer
aj-geddes
Implements user stories, writes clean tested code, follows best practices. Trigger keywords implement story, dev story, code, implement, build feature, fix bug, write tests, code review, refactor
nav-features
alekspetrov
Show and toggle Navigator features. Auto-invoke when user says "show features", "enable/disable feature", "my navigator settings", or "configure navigator".
nav-start
alekspetrov
Load Navigator documentation navigator when starting development session, resuming work, or beginning new feature. Use when user mentions starting work, beginning session, resuming after break, or checking project status.
nav-graph
alekspetrov
Query project knowledge graph. Search across tasks, SOPs, memories, and concepts. Use when user asks "what do we know about X?", "show everything related to X", or "remember this pattern/pitfall/decision".