Implement TOTP-based MFA with policy activation and encrypted secret storage.
npx skills add https://github.com/dloschiavo/orca --skill mfa-totp
Please help me install this Agent Skill. Skill: mfa-totp Source: https://github.com/dloschiavo/orca/tree/main/recipe/mfa-totp Command: npx skills add https://github.com/dloschiavo/orca --skill mfa-totp
This Skill addresses the need for multi-factor authentication (MFA) using Time-based One-Time Passwords (TOTP) to enhance security in multi-tenant applications.
Use the mfa-totp skill to enroll in multi-factor authentication on your account.
High-intent search queries and answers about installing and using this skill.
You can implement TOTP MFA using a four-state login state machine that handles pending, enrollment, challenge, and active states, while enforcing policy-based MFA activation across organizational tenants.
MFA recovery provides single-use recovery codes generated during enrollment, alongside admin recovery options including self-service, peer reset, support reset, and superadmin break-glass procedures.
TOTP secrets should be stored using AES-256-GCM encrypted secret storage to ensure cryptographic protection of user authentication keys at rest within the database.
Yes, a policy decision function evaluates organizational settings via an MFA required toggle to determine whether TOTP multi-factor authentication is mandatory for specific users or tenants.
Setting up this TOTP authentication requires the otp-auth library for token generation and validation, and the multi-tenant dependency for managing organizational policy isolation.
Trusted device functionality piggybacks on the existing session cookie, allowing users to bypass repeated MFA challenges on recognized devices without additional infrastructure.
legions-developerImplement multi-factor authentication with TOTP, OTP, backup codes, and trusted devices.
hopeovertureIdentify missing authentication and authorization protections in Next.js routes, middleware, and server actions.
philipyazAutomate AES-256-GCM encrypted daily backups to GitHub repositories.
gigun-devConfigure MFA flows with TOTP, email/SMS OTP, and backup codes.
