Auth
Authentication and authorization
LinkedIn CLI Skill
by swiftlysingh
Try a different browser or auth method
brainstorming
by liauw-media
"Use when starting new features, major changes, or unclear requirements. Establishes shared understanding before implementation."
crawler
by alpoxdev
Explore websites directly with Playwriter to design robust crawling flows. Analyze APIs, cookies, tokens, and headers, then document findings and generate crawler code.
session-summary
by ProjAnvil
Skill for summarizing the current session's context, including completed tasks, technical decisions, and next steps. Use this to create a handover document for a new session without losing critical context.
explore-codebase
by doodledood
"Context-gathering for finding files to read. Maps codebase structure, returns overview + prioritized file list with line ranges. Thoroughness: quick for lookups, medium for bugs/features, thorough for multi-area, very-thorough for architecture audits. Triggers: explore, find files, where is, how does X work."
check-history
by meriley
⚠️ MANDATORY - YOU MUST invoke this skill at the start of EVERY task. Reviews git history, status, and context before starting any work. Runs parallel git commands to understand current state, recent changes, and related work. NEVER gather git context manually.
Git Commit Helper
by dy9759
Generate descriptive commit messages by analyzing git diffs. Use when the user asks for help writing commit messages or reviewing staged changes.
decision-tracker
by Shakes-tzd
Git-powered state awareness - track file changes, session context, decisions, and work history. Query what happened in previous sessions and during current session. Auto-activates for state queries and before duplicating work.
network-forensics
by SherifEldeeb
Analyze network traffic captures and artifacts for forensic investigation. Use when investigating data exfiltration, command and control communications, lateral movement, or network-based attacks. Supports PCAP, PCAPNG, and NetFlow analysis.
Convert to Spec Kit Format
by jschulte
I'll start by reading your docs/reverse-engineering/ directory. Please confirm you're ready, and I'll begin the conversion process.
implementing-casbin
by meriley
Implement role-based (RBAC) and attribute-based (ABAC) access control in Go using Casbin. Covers model configuration, GORM adapters, Chi/gRPC middleware, and production patterns. Use when implementing authorization in Go services.
reviewing-casbin
by meriley
Review Go code using Casbin authorization for security issues, model correctness, policy design, and common anti-patterns. Use when reviewing PRs with Casbin code or auditing authorization implementations.
manage-branch
by meriley
Creates and manages git branches with enforced mriley/ prefix naming convention. Validates branch names, switches branches safely, and handles branch creation with proper base branch selection.
browser-tools
by brettatoms
Interactive browser automation via Chrome DevTools Protocol. Use when you need to interact with web pages, test frontends, or when user interaction with a visible browser is required.
mol
by b-on-g
Build or modify apps with $mol/MAM and related stack. Use when the user asks how to do something in $mol (view.tree, view.ts, css.ts), how to structure a MAM module, how to connect Giper Baza, how to build/admin apps on Giper Baza, or how to package/run with Tauri. Triggers include queries like "как на моле сделать …", "$mol view.tree", "MAM структура", "Giper Baza CRUD/roles/auth", "админка на Giper Baza", or "Tauri + $mol".
@tank/idd-bdd-pack
by tankpkg
Orchestrator pack combining Intent-Driven Development (IDD) with BDD end-to-end testing. Installs both @tank/idd and @tank/bdd-e2e-testing, then provides the bridge workflow for using .idd/ and .bdd/ folders together. Does not stand alone — requires both dependencies. Trigger phrases: "IDD BDD", "intent and behavior", "intent to BDD", "BDD from intent", "intent verified testing", "intent behavior pack", "combine IDD BDD", "IDD BDD orchestrator", "intent driven BDD", "intent plus BDD", "full testing workflow", ".idd .bdd together"
cui-javadoc
by cuioss
CUI JavaDoc documentation standards for Java classes, methods, and code examples
@tank/api-design-mastery
by tankpkg
REST, GraphQL, and tRPC API design for backend engineers. Covers endpoint design (resource modeling, HTTP methods, status codes), API versioning strategies (URL path, header, media type, deprecation), error contracts (RFC 7807/9457 Problem Details, field validation errors), pagination (offset, cursor, keyset, GraphQL Relay connections), filtering and sorting, authentication patterns (API keys, JWT, OAuth 2.0 flows with PKCE, Client Credentials), and authorization (RBAC, scopes, rate limiting). Synthesizes Lauret (The Design of Web APIs), Giroux (Production-Ready GraphQL), Madden (API Security in Action), Richer & Sanso (OAuth 2.0 in Action), tRPC v11 documentation, RFC 7807/9457, and Relay connections spec. Trigger phrases: "REST API", "GraphQL schema", "tRPC", "API design", "endpoint design", "API versioning", "deprecate API", "error response", "problem details", "RFC 7807", "API errors", "pagination", "cursor pagination", "offset pagination", "GraphQL connections", "Relay spec", "API auth", "API keys", "JWT", "OAuth 2.0", "PKCE", "Client Credentials", "rate limiting", "RBAC", "API security", "HTTP status codes", "REST resource", "GraphQL N+1", "DataLoader", "tRPC middleware", "tRPC context", "tRPC procedures", "breaking changes", "backward compatible", "Sunset header", "field validation", "filter API", "sort API", "API contract"
backlog-management
by ichi-h
バックログ解決のためのバックログ管理方法を定義します。バックログファイルの構造、フォーマット、命名規則、依存関係のガイドラインを提供します。
robot-startup
by Idate96
Set up the standard Moleworks ROS 2 tmux session for on-machine work with 4 windows in order (low_level, perception, estimator, foxglove). Use when asked to create/recreate the tmux window layout and start the stack quickly (dig controllers are started separately).
@tank/auth-patterns
by tankpkg
Authentication and authorization patterns for any language or framework. Covers JWT internals (structure, algorithms, attacks, validation), OAuth2 grant types (Authorization Code, PKCE, Client Credentials, Device Code), session management (cookies, expiry, fixation, distributed), RBAC/ABAC/ReBAC (role modeling, authorization policies, Zanzibar), OpenID Connect and social login (ID tokens, account linking, provider patterns), MFA (TOTP, WebAuthn/passkeys, backup codes, step-up auth), and authentication security (XSS/CSRF, token storage, credential stuffing, rate limiting). Synthesizes RFC 6749, RFC 7519, RFC 6238, W3C WebAuthn Level 2, NIST SP 800-63B, and OWASP Authentication/CSRF cheat sheets. Trigger phrases: "JWT", "OAuth2", "OAuth 2.0", "session management", "RBAC", "ABAC", "role-based access", "authorization model", "OpenID Connect", "OIDC", "social login", "MFA", "multi-factor authentication", "TOTP", "WebAuthn", "passkeys", "refresh token", "access token", "PKCE", "auth flow", "implement authentication", "implement auth", "sign in with", "cookie security", "HttpOnly", "SameSite", "token storage", "XSS auth", "CSRF protection", "credential stuffing", "account linking", "backup codes", "permission system", "login security", "password hashing"
gap-analysis
by HikaruEgashira
技術選定や競合分析を行う際に自律的にギャップ分析を行うメタスキルです。 複数の軸で類似概念を調査し、現行システムとのギャップを洗い出し、 なぜそのギャップが生じているのかを自問して戦略を立案します。 Trigger: 技術選定, 競合分析, 改善提案, ギャップ分析
git-convention
by duckyman-ai
Generate conventional git commit messages following Angular convention format. Use this skill when creating commits, writing commit messages, or reviewing git history. Triggers include "git commit", "commit message", "changelog", or requests to version control changes.
@tank/token-redaction
by tankpkg
"Detect and redact API tokens, keys, bearer values, and JWTs in local OpenCode SQLite session stores. Covers backup-first workflow, pattern matching for common token formats, dry-run verification, database integrity checks, and session cleanup. Triggers: redact, token, API key, secret, JWT, bearer, session store, SQLite, cleanup, sensitive data, credential leak, key rotation, security."