Skill UI

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

A comprehensive guide to implementing robust user authentication flows using Clerk. Learn to set up sign-up and sign-in pages, integrate OAuth social logins (Google, GitHub, Apple), and customize the UI entirely. This guide covers both quick pre-built component usage and advanced custom form implementation with full error handling and MFA support, ideal for building modern SaaS applications.

Walks through broken authentication assessments by analyzing login flows, password policies, brute-force/credential-stuffing, and session/token security to document vulnerabilities and mitigation steps for web applications.

Generates end-to-end tests for web workflows using Playwright, Cypress, or Selenium, automating browser steps and assertions so QA teams can validate registration, login, shopping cart, and other multi-step flows across browsers and devices.

Provides Playwright-powered browser automation that detects dev servers, writes tests to /tmp, launches a visible Chromium, and exercises login flows, responsive layouts, form submissions, link checks, or any browser task to validate web functionality.

This skill guides developers through installing the Vercel Command Line Interface (CLI) and configuring secure authentication. It covers multiple setup scenarios, including interactive OAuth login, setting environment tokens for CI/CD pipelines, and linking a local project directory to a specific Vercel project. Essential for initial project setup and ensuring smooth deployments.

This skill provisions instant, temporary PostgreSQL databases via Neon. It eliminates the need for user sign-up, logins, or credit cards, making it ideal for rapid local development, API prototyping, and isolated testing environments. Supports multiple methods including REST API calls, CLI commands, and SDK integration.

Analyzes test coverage gaps by cataloging routes, components, APIs, and existing specs, then builds a coverage matrix, prioritizes missing areas, and recommends follow-up plans or auto-generation for missing tests.

This skill implements User and Entity Behavior Analytics (UEBA) using Elasticsearch/OpenSearch. It goes beyond static rules to build behavioral baselines (e.g., login times, data volume) for users and entities. By calculating anomaly scores and performing peer group analysis, it detects suspicious activities such as data exfiltration, privilege abuse, and unauthorized access, allowing organizations to proactively identify high-risk insider threats.

This skill provides structured methods for detecting credential stuffing attacks by analyzing authentication logs. It focuses on identifying complex patterns such as login velocity anomalies, high IP diversity, password spray techniques, and suspicious geographical distributions of failed logins. It is essential for SOC analysts conducting threat hunting or building robust detection rules against account takeover attempts.

Comprehensive guide for implementing Firebase Authentication in Flutter apps. Covers setup, auth state management, email/password sign-in, social login, error handling, and security best practices for production-ready auth flows.