Skills auth-integration
📦
auth-integration
Content revision r1 Safe ⚙️ External commands🌐 Network access📁 Filesystem access🔑 Env variables
Implement Secure Next.js Authentication
Authentication work is easy to under-specify and hard to secure. This skill guides Claude, Codex, and Claude Code through forms, sessions, protected routes, and role checks.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "auth-integration" from https://skillstore.io/skills/awais68-auth-integration.md and its manifest at https://skillstore.io/api/skills/awais68-auth-integration/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "auth-integration". Add authentication to a new dashboard app.
Expected outcome:
- A file plan for auth routes, forms, session store, middleware, and guards.
- A checklist for environment variables, email verification, secure cookies, and session expiration.
- Implementation notes for Better Auth, Prisma, and Google OAuth setup.
Using "auth-integration". Create role checks for an education dashboard.
Expected outcome:
- A role model for admin, teacher, student, and parent users.
- Permission groups for common actions such as managing users and viewing class data.
- Guidance for enforcing checks in middleware, server actions, and UI guards.
Using "auth-integration". Review my login flow for missing security controls.
Expected outcome:
- A review list covering CSRF, secure cookies, rate limits, email verification, and audit logs.
- Concrete remediation steps for weak password rules or missing server-side authorization.
- Testing suggestions for login failures, logout cleanup, and protected route redirects.
Security Audit
Safev8 • 7/6/2026 Open versioned report
The static findings are false positives caused by Markdown code fences, TypeScript template literals, documentation links, and environment variable examples. No prompt injection, malicious command execution, filesystem access, credential exfiltration, or unsafe network behavior was found in SKILL.md.
1
Files scanned
707
Lines analyzed
0
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (36)
SKILL.md:28-56 SKILL.md:56-68 SKILL.md:68-123 SKILL.md:123-135 SKILL.md:135-205 SKILL.md:205-217 SKILL.md:217-250 SKILL.md:250-252 SKILL.md:252-287 SKILL.md:287-299 SKILL.md:299-367 SKILL.md:367-382 SKILL.md:382-383 SKILL.md:383-386 SKILL.md:386-387 SKILL.md:387-388 SKILL.md:388-391 SKILL.md:391-392 SKILL.md:392-395 SKILL.md:395-396 SKILL.md:396-462 SKILL.md:462-536 SKILL.md:536-540 SKILL.md:540-579 SKILL.md:579-583 SKILL.md:583-599 SKILL.md:599-603 SKILL.md:603-625 SKILL.md:625-630 SKILL.md:630-637 SKILL.md:637-651 SKILL.md:651-664 SKILL.md:664-668 SKILL.md:668-682 SKILL.md:682-686 SKILL.md:686-697
🌐 Network access (7)
📁 Filesystem access (4)
🔑 Env variables (5)
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/awais68-auth-integration/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/awais68-auth-integration?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/awais68-auth-integration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/awais68-auth-integration/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/awais68-auth-integration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
Awais68. (2026). auth-integration security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/awais68-auth-integration/audits/8BibTeX citation
@techreport{awais68-awais68-auth-integration-2026,
author = {Awais68},
title = {auth-integration security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/awais68-auth-integration/audits/8},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "auth-integration security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
- name: "Awais68"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/awais68-auth-integration/audits/8"
identifiers:
- type: other
value: "skillstore:awais68-auth-integration:audit:8"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
70
Community
74
Spec Compliance
What You Can Build
Add Auth To A New App
Create a full authentication baseline with provider setup, form validation, session state, and route protection.
Standardize Access Control
Define roles, permissions, middleware checks, and reusable guards for teams building dashboards or ERP workflows.
Review Auth Security Requirements
Check an implementation against practical controls for cookies, rate limits, email verification, and audit logging.
Try These Prompts
Set Up Basic Auth
Use the auth-integration skill to add Better Auth with email and Google login to my Next.js App Router project. Include required files, environment variables, and setup steps.
Build Auth Forms
Use the auth-integration skill to build login, signup, and forgot password pages. Use React Hook Form, Zod validation, loading states, and accessible error messages.
Protect Dashboard Routes
Use the auth-integration skill to protect my dashboard routes. Add middleware checks, a client auth guard, session hydration, and redirects for unauthenticated users.
Design Role-Based Access
Use the auth-integration skill to design role-based access control for admin, teacher, student, and parent users. Include server-side checks, permission helpers, audit logging, and test cases.
Best Practices
- Keep secrets in environment variables and use placeholders in shared examples.
- Enforce authorization on the server, even when client guards improve user experience.
- Add rate limiting, audit logging, secure cookies, and email verification before production release.
Avoid
- Do not rely only on client-side redirects to protect sensitive routes.
- Do not hardcode OAuth secrets, database URLs, or auth secrets in source files.
- Do not skip rate limiting for login, signup, or password reset endpoints.
Frequently Asked Questions
Which projects fit this skill?
It fits Next.js App Router projects that need Better Auth, NextAuth, forms, sessions, protected routes, or RBAC.
Does it install an auth provider automatically?
No. It gives implementation guidance and file patterns that an agent can apply in your project.
Can it support Google OAuth?
Yes. The skill includes Google provider configuration and environment variable guidance for client ID and client secret.
Does it cover role-based access control?
Yes. It includes role constants, permission helpers, middleware checks, and component guards.
Is it safe for production use?
It includes production controls, but your final implementation still needs project-specific security review.
Can Claude Code or Codex use this skill?
Yes. The metadata declares support for Claude, Codex, and Claude Code workflows.