auth-shield

Design and audit Supabase Auth flows for signup, login, and MFA.

Updated Dec 19, 2025
One-click install
npx skills add https://github.com/Spectaculous-Code/raamattu-nyt --skill auth-shield
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auth-shield
Source: https://github.com/Spectaculous-Code/raamattu-nyt/tree/main/.claude/skills/auth-shield
Command: npx skills add https://github.com/Spectaculous-Code/raamattu-nyt --skill auth-shield

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a robust framework for designing and auditing secure authentication, authorization, and session management systems, particularly for applications using Supabase Auth.

Core Features & Use Cases

  • Authentication Flow Design: Architecting secure signup, login, password reset, and magic link flows.
  • MFA & Passkey Implementation: Guiding the integration of multi-factor authentication, including passkeys (WebAuthn).
  • Session Management Auditing: Reviewing token TTLs, rotation policies, and secure storage practices.
  • Use Case: You are building a new fintech application and need to ensure your authentication system is resistant to phishing and credential stuffing attacks. This Skill will help you design the flows, choose appropriate MFA methods, and define secure session policies.

Quick Start

Use the auth-shield skill to design a secure login flow for a new web application.

Frequently Asked Questions about auth-shield

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design a secure authentication flow for a web application using Supabase Auth?

To design secure authentication with Supabase Auth, architect signup, login, and password reset flows while applying threat modeling to ensure resistance against credential stuffing and phishing attacks.

What's the best way to implement passkeys and MFA in a mobile application?

Implementing passkeys and MFA involves integrating WebAuthn standards and multi-factor authentication methods into your session management architecture to verify user identity securely.

How does session management auditing improve application security?

Session management auditing improves security by reviewing token TTLs, rotation policies, and secure storage practices, ensuring session data remains protected throughout its lifecycle.

Can I use magic links and OAuth for user signup and login flows?

Yes, you can architect secure signup and login flows utilizing magic links and OAuth protocols, designing the integration to align with security best practices for web and mobile applications.

When do I need to threat model my authorization and session management system?

You need to threat model your authorization system when building security-critical applications like fintech, ensuring your session management and authentication flows resist targeted attacks.

Why does my session token configuration need rotation policies and secure storage?

Session token configurations need rotation policies and secure storage to prevent token hijacking, ensuring that compromised session identifiers are rapidly invalidated and refreshed.