The Agent Skills Directory

[SAFE]: The skill provides robust security instructions for authentication implementation, mandating PKCE with S256 and high-entropy verifiers to prevent authorization code interception.
[SAFE]: It enforces Refresh Token Rotation (RTR) with reuse detection, ensuring that the presentation of a previously used token revokes the entire session family to mitigate replay attacks.
[SAFE]: Multi-tenant isolation is correctly addressed using database-level Row-Level Security (RLS) policies and transaction-scoped configuration (set_config), which is a recommended defense-in-depth strategy.
[SAFE]: The skill provides clear guidance on preventing request-scoped state bleed in persistent worker runtimes like FrankenPHP, Octane, and ASGI using container resets and context variables.
[SAFE]: No obfuscated URLs, hardcoded credentials (beyond architectural examples), or unauthorized remote code execution patterns were detected within the instructions or reference materials.

implement-auth