[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6FWDVCG66A6WDBQ56N95BMY":3,"skill-same:01M6FWDVCG66A6WDBQ56N95BMY":64},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":28,"linkOnly":29,"markdownContent":30,"markdownBody":31,"frontMatter":32,"refName":33,"commitSha":34,"skillDirectory":35,"forksCount":36,"repositoryHtmlUrl":37,"repositoryHomepageUrl":6,"ownerHtmlUrl":38,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":39,"install":40,"resources":53},"01M6FWDVCG66A6WDBQ56N95BMY","auth-auditor",null,"Audit your authentication implementation for security flaws. Use when you need to verify your auth is actually secure.","kbarbel640-del\u002Fskills","kbarbel640-del","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F255315490?v=4","01M6CJPPQGCCESXMG3K7BBGQ5J","01M6CJPPX2PB2BCZERFVM2C2B3",1,"MIT","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Flxgicstudios\u002Fauth-auditor\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27],"auth","auth auditor","security","secure","authentication","audit","verify","use","implementation","you","2026-11-10 10:12:30",false,"---\nname: auth-auditor\ndescription: Audit your authentication implementation for security flaws. Use when you need to verify your auth is actually secure.\n---\n\n# Auth Auditor\n\nYou implemented auth. But did you do it right? This tool audits your authentication code for common security mistakes. Missing CSRF tokens, weak password hashing, insecure session management, JWT misuse. It checks all of it and tells you what needs fixing.\n\n**One command. Zero config. Just works.**\n\n## Quick Start\n\n```bash\nnpx ai-auth-check src\u002F\n```\n\n## What It Does\n\n- Scans your auth implementation for security vulnerabilities\n- Checks password hashing algorithms and salt usage\n- Detects missing CSRF protection on state changing endpoints\n- Finds insecure session configuration and JWT problems\n- Reports issues with severity levels and specific fix instructions\n\n## Usage Examples\n\n```bash\n# Audit your entire auth system\nnpx ai-auth-check src\u002F\n\n# Check specific auth files\nnpx ai-auth-check src\u002Fauth\u002F\n\n# Scan middleware and route handlers\nnpx ai-auth-check src\u002Fmiddleware\u002F src\u002Froutes\u002F\n```\n\n## Best Practices\n\n- **Use bcrypt or argon2 for passwords** - MD5 and SHA are not password hashing algorithms, no matter what that tutorial said\n- **Set httpOnly and secure flags on cookies** - Missing these is one of the most common auth mistakes\n- **Rotate JWT secrets** - Hardcoded secrets that never change are a ticking time bomb\n- **Rate limit login attempts** - Without rate limiting, brute force attacks are trivial\n\n## When to Use This\n\n- Before launching any app that handles user accounts\n- After implementing a custom auth flow instead of using a library\n- When migrating from one auth provider to another\n- During security review of authentication related code\n\n## Part of the LXGIC Dev Toolkit\n\nThis is one of 110+ free developer tools built by LXGIC Studios. No paywalls, no sign-ups, no API keys on free tiers. Just tools that work.\n\n**Find more:**\n- GitHub: https:\u002F\u002Fgithub.com\u002FLXGIC-Studios\n- Twitter: https:\u002F\u002Fx.com\u002Flxgicstudios\n- Substack: https:\u002F\u002Flxgicstudios.substack.com\n- Website: https:\u002F\u002Flxgic.dev\n\n## Requirements\n\nNo install needed. Just run with npx. Node.js 18+ recommended.\n\n```bash\nnpx ai-auth-check --help\n```\n\n## How It Works\n\nThe tool scans your source code for authentication patterns including login handlers, session management, password storage, and token generation. It analyzes these against security best practices and common vulnerability patterns, then uses AI to generate context-specific fix recommendations.\n\n## License\n\nMIT. Free forever. Use it however you want.","# Auth Auditor\n\nYou implemented auth. But did you do it right? This tool audits your authentication code for common security mistakes. Missing CSRF tokens, weak password hashing, insecure session management, JWT misuse. It checks all of it and tells you what needs fixing.\n\n**One command. Zero config. Just works.**\n\n## Quick Start\n\n```bash\nnpx ai-auth-check src\u002F\n```\n\n## What It Does\n\n- Scans your auth implementation for security vulnerabilities\n- Checks password hashing algorithms and salt usage\n- Detects missing CSRF protection on state changing endpoints\n- Finds insecure session configuration and JWT problems\n- Reports issues with severity levels and specific fix instructions\n\n## Usage Examples\n\n```bash\n# Audit your entire auth system\nnpx ai-auth-check src\u002F\n\n# Check specific auth files\nnpx ai-auth-check src\u002Fauth\u002F\n\n# Scan middleware and route handlers\nnpx ai-auth-check src\u002Fmiddleware\u002F src\u002Froutes\u002F\n```\n\n## Best Practices\n\n- **Use bcrypt or argon2 for passwords** - MD5 and SHA are not password hashing algorithms, no matter what that tutorial said\n- **Set httpOnly and secure flags on cookies** - Missing these is one of the most common auth mistakes\n- **Rotate JWT secrets** - Hardcoded secrets that never change are a ticking time bomb\n- **Rate limit login attempts** - Without rate limiting, brute force attacks are trivial\n\n## When to Use This\n\n- Before launching any app that handles user accounts\n- After implementing a custom auth flow instead of using a library\n- When migrating from one auth provider to another\n- During security review of authentication related code\n\n## Part of the LXGIC Dev Toolkit\n\nThis is one of 110+ free developer tools built by LXGIC Studios. No paywalls, no sign-ups, no API keys on free tiers. Just tools that work.\n\n**Find more:**\n- GitHub: https:\u002F\u002Fgithub.com\u002FLXGIC-Studios\n- Twitter: https:\u002F\u002Fx.com\u002Flxgicstudios\n- Substack: https:\u002F\u002Flxgicstudios.substack.com\n- Website: https:\u002F\u002Flxgic.dev\n\n## Requirements\n\nNo install needed. Just run with npx. Node.js 18+ recommended.\n\n```bash\nnpx ai-auth-check --help\n```\n\n## How It Works\n\nThe tool scans your source code for authentication patterns including login handlers, session management, password storage, and token generation. It analyzes these against security best practices and common vulnerability patterns, then uses AI to generate context-specific fix recommendations.\n\n## License\n\nMIT. Free forever. Use it however you want.",{"name":5,"description":7},"main","e7e336ac628c3e3bd771aff1aaa469c93778f94a","skills\u002Flxgicstudios\u002Fauth-auditor",0,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del","2026-08-23 22:39:37",{"source":8,"skillName":5,"commands":41,"prompt":51,"zipAvailable":52},[42,45,48],{"tool":43,"command":44},"npx","npx skills add kbarbel640-del\u002Fskills --skill auth-auditor",{"tool":46,"command":47},"bunx","bunx skills add kbarbel640-del\u002Fskills --skill auth-auditor",{"tool":49,"command":50},"pnpm","pnpm dlx skills add kbarbel640-del\u002Fskills --skill auth-auditor","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Flxgicstudios\u002Fauth-auditor\u002FSKILL.md",true,[54,60],{"path":55,"resourceType":56,"resourceTypeDesc":57,"sizeBytes":58,"sourceHtmlUrl":59},"_meta.json","REFERENCE","参考文档",282,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Flxgicstudios\u002Fauth-auditor\u002F_meta.json",{"path":61,"resourceType":56,"resourceTypeDesc":57,"sizeBytes":62,"sourceHtmlUrl":63},"README.md",485,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Flxgicstudios\u002Fauth-auditor\u002FREADME.md",[65,96,124,145,151,171],{"skillNo":66,"name":67,"nameZh":6,"description":68,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":69,"categories":70,"keywords":76,"publishedAt":28},"01M6G8J55967D6281ACMKAKTEQ","crowd-prompting","A marketplace where AI agents improve prompts, system instructions, tool descriptions, and other text-based content with domain expertise from real-world operations — and earn tokens for valuable contributions.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzzadrian\u002Fcrowd-prompting\u002FSKILL.md",[71],{"categoryNo":72,"categoryName":73,"taxonomyType":74,"taxonomyTypeDesc":75},"01JBSEEDCAT000000000000036","内容创作者","PROFESSION","适用职业",[77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95],"crowd prompting","prompting","api","with","tokens","domain","world","prompts","operations","instructions","text","tool","system","improve","productivity","marketplace","https","content","ai agents",{"skillNo":97,"name":98,"nameZh":6,"description":99,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":100,"categories":101,"keywords":107,"publishedAt":28},"01M6G8J0PKPAYVET6BWE8W4C26","dilemm-ai","Compete in DilemmAI, the prisoner's dilemma AI arena at dilemm.ai. Use when an OpenClaw agent wants to create an account, design and submit strategy prompts for their bot, enter matchmaking, analyze historical matches and leaderboards, and iterate on bot strategy. Requires headless browser automation (no API available yet).","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzyori\u002Fdilemm-ai\u002FSKILL.md",[102],{"categoryNo":103,"categoryName":104,"taxonomyType":105,"taxonomyTypeDesc":106},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[108,79,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,84,25],"dilemm ai","arena","analyze","browser","openclaw agent","create","automation","browser automation","bot","openclaw","design","strategy","headless","compete","submit","matchmaking",{"skillNo":125,"name":126,"nameZh":6,"description":127,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":128,"categories":129,"keywords":133,"publishedAt":28},"01M6G8HWAF3K9SW7NP3Z83CPJ6","arxiv-paper-reviews","Interact with arXiv Crawler API to fetch papers, read reviews, and submit comments. Use when working with arXiv papers, fetching paper lists by date\u002Fcategory\u002Finterest, viewing paper details with comments, or submitting paper reviews via API at http:\u002F\u002F150.158.152.82:8000.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Fweak-accept\u002FSKILL.md",[130],{"categoryNo":131,"categoryName":132,"taxonomyType":105,"taxonomyTypeDesc":106},"01JBSEEDCAT000000000000021","资料检索与研究",[134,135,136,137,138,139,140,80,141,122,25,142,79,143,144],"arxiv paper reviews","reviews","arxiv","paper","crawler","papers","comments","fetch","read","http","via",{"skillNo":146,"name":126,"nameZh":6,"description":127,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":147,"categories":148,"keywords":150,"publishedAt":28},"01M6G8HQJ7N7WMY6YV7D7SSJ16","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Farxiv-paper-reviews\u002FSKILL.md",[149],{"categoryNo":131,"categoryName":132,"taxonomyType":105,"taxonomyTypeDesc":106},[137,136,135,134,144,139,140,80,138,122,25,141,142,79,143],{"skillNo":152,"name":153,"nameZh":6,"description":154,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":155,"categories":156,"keywords":157,"publishedAt":28},"01M6G8HM95Y64JNVFC2HN4E2BG","git-summary","Get a quick summary of the current Git repository including status, recent commits, branches, and contributors.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzweack\u002Fgit-summary\u002FSKILL.md",[],[158,159,160,161,162,163,164,165,166,167,168,169,170],"git","summary","git summary","commits","repository","win32","status","linux","contributors","true","quick","get","branches",{"skillNo":172,"name":173,"nameZh":6,"description":174,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":175,"categories":176,"keywords":181,"publishedAt":28},"01M6G8HGEGF05CNEJCGVYFSC4R","agent-constitution","Interact with AgentConstitution governance contracts on Base Sepolia. Check compliance, read rules, log actions, query governance state.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fztsalexey\u002Fagent-constitution\u002FSKILL.md",[177,178],{"categoryNo":103,"categoryName":104,"taxonomyType":105,"taxonomyTypeDesc":106},{"categoryNo":179,"categoryName":180,"taxonomyType":74,"taxonomyTypeDesc":75},"01JBSEEDCAT000000000000037","律师与法务",[182,183,184,185,80,186,187,33,188,142,189,190,191,192,193,93,194,195,196],"agent constitution","constitution","contracts","tree","query","base","log","check","Rules","projects","compliance","actions","state","governance","github"]