security_lgpd

Implement JWT and OAuth2 authentication with PII encryption and LGPD compliance.

Updated Apr 26, 2026
One-click install
npx skills add https://github.com/Renzo-Tognella/UniversalThingsForMyAgents --skill security-lgpd-renzo-tognella
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security_lgpd
Source: https://github.com/Renzo-Tognella/UniversalThingsForMyAgents/tree/main/skills/06_security_lgpd
Command: npx skills add https://github.com/Renzo-Tognella/UniversalThingsForMyAgents --skill security-lgpd-renzo-tognella

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires BCryptPasswordEncoder, Bucket4j, ExpoSecureStore, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the secure handling of sensitive user data and ensures compliance with Brazil's LGPD regulations.

Core Features & Use Cases

  • Authentication: Securely authenticate users with JWT + OAuth2 PKCE and rate limiting.
  • Data Encryption: Encrypts Personal Identifiable Information (PII) fields with AES-256-GCM.
  • Rate Limiting: Configures rate limiting to prevent abuse.
  • LGPD Compliance: Implements endpoints for data export and deletion, records consent, and breach notifications.
  • Mobile Security: Implements mobile-specific protections including SecureStore, SSL pinning, and biometric auth.
  • Scraping Ethics: Adheres to ethical scraping practices.
  • Use Case: For an online job platform, this Skill can manage sensitive user data like CPF, email, phone numbers, and salaries in a secure and compliant manner.

Quick Start

Use the 'security_lgpd' skill to secure your application's user authentication and data handling.

Frequently Asked Questions about security_lgpd

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement LGPD compliance for user data in a web application?

To implement LGPD compliance, you must encrypt PII fields with AES-256-GCM, build endpoints for data export and deletion, and record user consent. This skill manages these flows alongside JWT authentication to secure sensitive user data.

How does JWT authentication with OAuth2 PKCE work with mobile security?

JWT authentication with OAuth2 PKCE works with mobile security by leveraging ExpoSecureStore for token storage, enforcing SSL pinning, and utilizing biometric authentication. Rate limiting via Bucket4j is also configured to prevent API abuse.

What is the best way to encrypt PII data like CPF and salary records?

The best way to encrypt PII data is using AES-256-GCM encryption for sensitive fields like CPF, email, phone numbers, and salaries. This skill applies BCryptPasswordEncoder for passwords and ensures all personally identifiable information remains protected.

Does this LGPD compliance solution support data export and breach notification endpoints?

Yes, this LGPD compliance solution supports data export and deletion endpoints, records user consent, and manages breach notifications. It ensures your web application meets Brazil's LGPD regulations for handling sensitive user data securely.

Can I use Bucket4j and BCryptPasswordEncoder to add rate limiting to my authentication flow?

Yes, you can use Bucket4j to configure rate limiting and prevent abuse during user authentication. BCryptPasswordEncoder is used simultaneously to securely hash passwords before storing them in your database.

Why do I need SSL pinning and SecureStore for mobile authentication?

You need SSL pinning and SecureStore for mobile authentication to prevent man-in-the-middle attacks and securely store JWT tokens locally. This skill implements these mobile-specific protections along with biometric auth to safeguard user data.