Auth Js
ListedSecurely generates and validates JWT authentication tokens using industry best practices and customizable configurations.
Install on your platform
Showing Claude Code. One command installs this skill into any of the agents below.
- 1
Run this in your project
terminal$ npx skills add jackspace/claudeskillz --skill auth-js -a claude-code Uses the open-source
skillsCLI and needs Node.js. Add-gto install it for your user instead of this project.
What we know about this skill
Publisher
jackspace
Taken from the source listing. We haven't verified who controls this account.
Install target
Live repository
Not pinned. Installing fetches whatever the repository holds at the time you run the command.
Automated safety checks
This skill failed 1 of 6 checks. A failure is not proof of bad intent; it means something in the code needs a human to look at it before you run it.
No undeclared network calls: failed
Contacts 2 hosts that are neither well-known infrastructure nor declared in the skill's frontmatter: authjs.dev, oauth2.googleapis.com.
Every host the skill dials — from its scripts, its config endpoints or the commands it tells the agent to run — is either well-known package and API infrastructure or declared in its own frontmatter. Links in documentation are not counted.
Hosts contacted
authjs.devundeclaredoauth2.googleapis.comundeclaredWhat it found
- skills/auth-js/SKILL.json:17contacts authjs.dev
"content": "**Production-tested**: Multiple Next.js and Cloudflare Workers projects\r\n**Last Updated**: 2025-10-26\r\n**Status**: Production Ready ✅\r\n**Offi… - skills/auth-js/SKILL.md:971contacts oauth2.googleapis.com
const response = await fetch("https://oauth2.googleapis.com/token", {
Declares what it does: passed
SKILL.md parses and declares a name and a description.
SKILL.md exists, its frontmatter parses, and it declares a name and a description.
No obfuscated payloads: passed
No encoded or obfuscated payloads.
No base64, hex or compressed blob is decoded and then executed, and no encoded shell commands.
No credential access: passed
Reads no keys, tokens, keychains or credential files.
Neither the code nor the SKILL.md instructions read SSH keys, cloud credentials, keychains, token stores, browser cookie databases or dotfiles that hold secrets.
No pipe-to-shell installers: passed
No pipe-to-shell or download-and-run installers.
No `curl … | sh` pattern, in the code or in the instructions, that runs code fetched at run time.
Pinned to a commit: passed
Scanned jackspace/claudeskillz at aef4e299d1.
The exact upstream commit SHA that was scanned is recorded, so the result refers to specific bytes.
- Commit
- aef4e299d1
- Manifest
- skills/auth-js/SKILL.md
- Scanned
- 3 files, 1,552 lines
About this skill
What it does
The auth-js skill provides JavaScript authentication capabilities to AI agents. It allows agents to securely manage user logins, handle password resets, and implement multi-factor authentication. This enhances the security of applications and protects sensitive user data within agent workflows.
When to use it
- Secure Web Interactions: When your agent needs to interact with web services that require user login credentials.
- Password Management: For agents assisting users with password resets or account recovery processes.
- Multi-Factor Authentication (MFA): To add an extra layer of security when accessing sensitive resources through the agent.
- User Account Creation/Management: When building applications that require user registration and profile management features.
Key capabilities
- JavaScript authentication implementation
- Password reset functionality
- Multi-factor authentication support
Example prompts
- "Implement a login flow for this website using the auth-js skill."
- "Reset the password for user 'john.doe' using the auth-js skill."
- "Enable multi-factor authentication for all new users with the auth-js skill."
Tips & gotchas
The auth-js skill requires a basic understanding of JavaScript and web security principles to implement effectively. Ensure you have appropriate credentials and API keys configured before using this skill in production environments.