Build CloudBase Web Authentication
Web teams need reliable CloudBase auth flows without stale SDK patterns. This skill guides provider checks, session guards, and Web SDK v3 integration.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "auth-web-cloudbase" from https://skillstore.io/skills/tencentcloudbase-auth-web-cloudbase.md and its manifest at https://skillstore.io/api/skills/tencentcloudbase-auth-web-cloudbase/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "auth-web-cloudbase". Add username and password login to an existing React CloudBase app.
Expected outcome:
Using "auth-web-cloudbase". Protect the dashboard after users sign in with CloudBase.
Expected outcome:
Using "auth-web-cloudbase". Add phone OTP registration and login.
Expected outcome:
Static command, network, filesystem, and reconnaissance findings are false positives caused by Markdown formatting, public setup links, and frontend auth examples. No prompt injection or malicious exfiltration intent was found. A medium semantic risk remains because the skill tells agents to automatically change CloudBase auth provider settings without an explicit confirmation requirement.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/tencentcloudbase-auth-web-cloudbase/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/tencentcloudbase-auth-web-cloudbase?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/tencentcloudbase-auth-web-cloudbase?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tencentcloudbase-auth-web-cloudbase/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/tencentcloudbase-auth-web-cloudbase.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>tencentcloudbase. (2026). auth-web-cloudbase security audit report (audit version 2) [Author version 2.23.8]. Skillstore. https://skillstore.io/skills/tencentcloudbase-auth-web-cloudbase/audits/2@techreport{tencentcloudbase-tencentcloudbase-auth-web-cloudbase-2026,
author = {tencentcloudbase},
title = {auth-web-cloudbase security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/tencentcloudbase-auth-web-cloudbase/audits/2},
note = {Author version 2.23.8}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "auth-web-cloudbase security audit report (audit version 2)"
version: "2.23.8"
type: report
authors:
- name: "tencentcloudbase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/tencentcloudbase-auth-web-cloudbase/audits/2"
identifiers:
- type: other
value: "skillstore:tencentcloudbase-auth-web-cloudbase:audit:2"
description: "Skillstore immutable audit report identifier"
Implement CloudBase login forms with OTP, password, or OAuth while following SDK v3 auth method guidance.
Replace unreliable login-state checks with session-based route guards that reject anonymous or missing sessions.
Check whether email, phone, username, anonymous, or OAuth providers are enabled before implementation begins.
Use auth-web-cloudbase to add a CloudBase Web login page. Check provider readiness first, then wire the existing form handlers.
Use auth-web-cloudbase to protect these routes with getSession checks. Reject missing sessions and anonymous sessions before rendering private views.
Use auth-web-cloudbase to implement phone OTP, username password login, and OAuth. Confirm each provider before writing browser code.
Use auth-web-cloudbase to review this app for deprecated auth methods, incorrect provider assumptions, and weak route guards. Propose focused fixes.
Author
tencentcloudbaseLicense
MIT
Author version
v2.23.8
Skillstore revision
r1
Ref
24b2fe42a456262f3fd0fb3df72e12d9ed2c32ec
Maintenance freshness
7/18/2026
Usage
1 downloads · 0 views
File structure
📄 SKILL.md
Build CloudBase Node Auth Flows
Server-side CloudBase auth work can mix caller identity, user lookup, and custom login details. This skill guides Node.js agents through correct SDK methods and secure backend patterns.
Build CloudBase Mini Program Database Features
Mini Program database work requires correct SDK patterns and security rules. This skill guides Claude, Codex, and Claude Code through CloudBase document database tasks.
Build CloudBase AI Backends in Node.js
Backend AI setup often fails when model groups, credits, and SDK methods are guessed. This skill gives CloudBase Node.js patterns, preflight checks, and model enablement steps.
Design Distinctive UI Prototypes
Generic AI interfaces often lack visual direction and platform-aware detail. This skill guides Claude, Codex, and Claude Code to define design intent before building prototypes.
Plan Complex Coding Changes
Large coding changes often fail when scope, design, and acceptance criteria are vague. This skill guides Claude, Codex, and Claude Code through requirements, design, tasks, and staged confirmation.
Add CloudBase AI Models to Web Apps
Browser AI integration can fail when model groups, auth, or Token Credits are not prepared. This skill guides CloudBase preflight, model enabling, and SDK calls for web apps.
Strengthen Security Engineering Decisions
by 89jobrien
Security work often spans architecture, identity, compliance, testing, and response planning. This skill gives Claude, Codex, and Claude Code structured security engineering guidance.
Implement Clerk Authentication Safely
by sickn33
Clerk setup can be error-prone across middleware, server components, organizations, and webhooks. This skill provides focused implementation guidance for secure Next.js authentication flows.
Design Production-Ready APIs
by AutumnsGrove
Inconsistent API contracts create integration errors and costly migrations. This skill guides REST, GraphQL, OpenAPI, authentication, versioning, validation, and documentation decisions.
Build React Email Templates
by resend
HTML email work is difficult because email clients render styles differently. This skill guides Claude, Codex, and Claude Code through React Email templates, previews, sending, and accessibility.
Implement React View Transitions
by vercel-labs
React view transitions are easy to misplace, causing silent or noisy animations. This skill guides route, Suspense, list, and shared element animation choices.
Improve Vue 3 TypeScript Practices
by hyf0
Vue TypeScript projects often hit confusing template, router, and Volar errors. This skill gives targeted Vue 3 fixes for Codex, Claude, and Claude Code.