The Agent Skills Directory

[SAFE]: The skill serves as a reference for secure authentication implementations, including JWT handling, RBAC, and OAuth2 with PKCE.
[SAFE]: It correctly utilizes environment variables (e.g., process.env.JWT_SECRET) for managing sensitive credentials rather than hardcoding them.
[SAFE]: The code samples employ standard cryptographic libraries (crypto module) and industry-recognized packages (jsonwebtoken) for security operations.
[SAFE]: The inclusion of a detailed 'Anti-Patterns' section demonstrates a security-first approach by explicitly warning against common vulnerabilities like XSS, user enumeration, and weak hashing algorithms.

authentication-patterns