Build CloudBase Node Auth Flows
Server-side CloudBase auth work can mix caller identity, user lookup, and custom login details. This skill guides Node.js agents through correct SDK methods and secure backend patterns.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "auth-nodejs-cloudbase" from https://skillstore.io/skills/tencentcloudbase-auth-nodejs-cloudbase.md and its manifest at https://skillstore.io/api/skills/tencentcloudbase-auth-nodejs-cloudbase/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "auth-nodejs-cloudbase". A developer asks how a CloudBase function can know who called it.
Expected outcome:
The response explains when to use getUserInfo, which identifiers matter, and how to apply authorization checks server side.
Using "auth-nodejs-cloudbase". A platform team needs CloudBase login for users from an existing account database.
Expected outcome:
The response outlines a backend ticket issuance flow, credential handling rules, and the web client handoff.
Using "auth-nodejs-cloudbase". An admin tool must inspect a user profile without exposing raw profile data to clients.
Expected outcome:
The response recommends trusted backend lookup methods, minimal response shaping, and careful production logging.
The static score is driven by Markdown code spans, documentation URLs, sibling-skill path references, and private-key handling guidance in SKILL.md. I found no prompt injection, executable scripts, outbound callbacks, path traversal behavior, or embedded secrets.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/tencentcloudbase-auth-nodejs-cloudbase/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/tencentcloudbase-auth-nodejs-cloudbase?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/tencentcloudbase-auth-nodejs-cloudbase?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tencentcloudbase-auth-nodejs-cloudbase/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/tencentcloudbase-auth-nodejs-cloudbase.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>tencentcloudbase. (2026). auth-nodejs-cloudbase security audit report (audit version 2) [Author version 2.23.8]. Skillstore. https://skillstore.io/skills/tencentcloudbase-auth-nodejs-cloudbase/audits/2@techreport{tencentcloudbase-tencentcloudbase-auth-nodejs-cloudbase-2026,
author = {tencentcloudbase},
title = {auth-nodejs-cloudbase security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/tencentcloudbase-auth-nodejs-cloudbase/audits/2},
note = {Author version 2.23.8}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "auth-nodejs-cloudbase security audit report (audit version 2)"
version: "2.23.8"
type: report
authors:
- name: "tencentcloudbase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/tencentcloudbase-auth-nodejs-cloudbase/audits/2"
identifiers:
- type: other
value: "skillstore:tencentcloudbase-auth-nodejs-cloudbase:audit:2"
description: "Skillstore immutable audit report identifier"
Read caller identity in a CloudBase function and use uid or customUserId for access checks.
Query CloudBase end-user profiles from trusted server-side admin tools.
Create custom login tickets after an external user system authenticates a user.
Use the auth-nodejs-cloudbase skill to show how my Node CloudBase function can read the current caller identity and choose the right user identifier.
Use the auth-nodejs-cloudbase skill to design a trusted Node backend flow that looks up a CloudBase user by uid, phone, email, or custom user ID.
Use the auth-nodejs-cloudbase skill to create a Node-side custom login ticket flow for users authenticated by my existing account system.
Use the auth-nodejs-cloudbase skill to review my CloudBase Node auth plan for backend-only responsibilities, sensitive logging, and client handoff boundaries.
Author
tencentcloudbaseLicense
MIT
Author version
v2.23.8
Skillstore revision
r1
Ref
24b2fe42a456262f3fd0fb3df72e12d9ed2c32ec
Maintenance freshness
7/18/2026
Usage
1 downloads · 0 views
File structure
📄 SKILL.md
Build CloudBase Mini Program Database Features
Mini Program database work requires correct SDK patterns and security rules. This skill guides Claude, Codex, and Claude Code through CloudBase document database tasks.
Build CloudBase AI Backends in Node.js
Backend AI setup often fails when model groups, credits, and SDK methods are guessed. This skill gives CloudBase Node.js patterns, preflight checks, and model enablement steps.
Design Distinctive UI Prototypes
Generic AI interfaces often lack visual direction and platform-aware detail. This skill guides Claude, Codex, and Claude Code to define design intent before building prototypes.
Plan Complex Coding Changes
Large coding changes often fail when scope, design, and acceptance criteria are vague. This skill guides Claude, Codex, and Claude Code through requirements, design, tasks, and staged confirmation.
Add CloudBase AI Models to Web Apps
Browser AI integration can fail when model groups, auth, or Token Credits are not prepared. This skill guides CloudBase preflight, model enabling, and SDK calls for web apps.
Build WeChat Mini Program AI Calls
WeChat Mini Program AI setup has provider, billing, and streaming differences that are easy to misconfigure. This skill guides Claude, Codex, or Claude Code through CloudBase preflight checks and wx.cloud.extend.AI usage.
Strengthen Security Engineering Decisions
by 89jobrien
Security work often spans architecture, identity, compliance, testing, and response planning. This skill gives Claude, Codex, and Claude Code structured security engineering guidance.
Implement Clerk Authentication Safely
by sickn33
Clerk setup can be error-prone across middleware, server components, organizations, and webhooks. This skill provides focused implementation guidance for secure Next.js authentication flows.
Audit Code for Security Risks
by Barnhardt-Enterprises-Inc
Security-sensitive code is easy to ship with hidden flaws in authentication, input handling, and secrets. This skill gives Claude, Codex, and Claude Code structured security references and scanner guidance for safer reviews.
Protect Next.js Auth Routes
by AayushBaniya2006
Authentication changes often fail when teams mix session APIs and route guards. This skill guides Claude, Codex, and Claude Code toward the project helpers for secure access control.
Build Secure Backend Services
by sickn33
Backend flaws can expose data, accounts, and infrastructure. This skill guides secure implementation and review using established defensive patterns.
Review Web App Security Before Release
by sickn33
Security issues often appear when teams add authentication, APIs, payments, uploads, or sensitive data flows. This skill provides a focused checklist and review prompts for finding common web application risks before deployment.