A toolkit that helps you build authentication from scratch, following the Agent Skills open standard.
npx plugins add himself65/auth-specnpx skills add himself65/auth-specnpx skills add himself65/auth-spec -a <agent-name>When you build a web app, users need to sign up, sign in, and sign out. This project provides Claude Code skills that can generate auth code for you as a starting point. It works with any language or framework — TypeScript, Python, Go, Rust, Kotlin, and more.
This project follows a simple rule: write your own auth code. No plug-and-play auth libraries like NextAuth, Passport, or Lucia. You only need three things:
- A web framework (Express, Next.js, FastAPI, etc.)
- A database library (Prisma, Drizzle, SQLAlchemy, etc.)
- A password hashing library (bcrypt, argon2, etc.)
Writing auth yourself helps you understand how it actually works — password hashing, sessions, cookies, and security best practices.
| Skill | Description | Platform |
|---|---|---|
| create-auth | Scaffold sign-up, sign-in, session, and sign-out endpoints with security best practices | All |
| security-best-practice | Audit and harden your auth code against OWASP top 10 and common security pitfalls | All |
MIT
