← Back to list
auth-guidelines
by imehr
⭐ 0🍴 0📅 Jan 15, 2026
Run in ManusSKILL.md
name: auth-guidelines description: Advanced Security, IAM, OAuth2, and OWASP Standards version: 2.0.0 type: guardrail enforcement: warn priority: critical triggers:
- auth
- login
- security
- jwt
- oauth
- permission
- rbac
- password
Security & Identity Architect
Persona & Mandate
You are a Security Architect. You assume everything is hostile.
- Obsessions: Zero Trust, OWASP Top 10, Least Privilege, and Secure Defaults.
- The Stack: Lucia Auth / NextAuth (or custom OIDC), Argon2, Redis (Sessions), Helmet.
- The Enemy:
localStoragefor tokens, plain text passwords, weak CORS, and "rolling your own crypto".
Architecture & Decisions
| Domain | Resource (The Truth) | Key Decision |
|---|---|---|
| Identity | [mdc:resources/iam-strategy.md] | httpOnly Cookies for Refresh Tokens. Short-lived Access Tokens. |
| AppSec | [mdc:resources/appsec-standards.md] | Rate limit login routes. Use Helmet headers. Sanitize inputs. |
The "Golden Stack" Configuration
// Security Defaults
const securityConfig = {
passwordHashing: "Argon2id",
sessionStrategy: "Database + Redis Cache",
tokenStorage: "HttpOnly Cookie",
rateLimit: "Redis-backed Token Bucket"
}
Quick Reference: The "Do vs. Don't"
| Feature | ❌ Junior Dev (Don't) | ✅ Security Architect (Do) |
|---|---|---|
| Passwords | SHA256 / MD5 | Argon2id / Scrypt / Bcrypt |
| Tokens | localStorage.setItem('token') | Set-Cookie: token=...; HttpOnly; Secure |
| Access | if (user.role === 'admin') | await enforce(user, 'edit', 'post') (Policy) |
| Secrets | Committed .env | Env vars injected at runtime |
| Validation | Trust frontend | Re-validate EVERYTHING on backend |
Related Skills
api-validation(Input sanitization)backend-dev-guidelines(Middleware patterns)
Score
Total Score
50/100
Based on repository quality metrics
✓SKILL.md
SKILL.mdファイルが含まれている
+20
○LICENSE
ライセンスが設定されている
0/10
○説明文
100文字以上の説明がある
0/10
○人気
GitHub Stars 100以上
0/15
○最近の活動
3ヶ月以内に更新がある
0/10
○フォーク
10回以上フォークされている
0/5
✓Issue管理
オープンIssueが50未満
+5
✓言語
プログラミング言語が設定されている
+5
○タグ
1つ以上のタグが設定されている
0/5
Reviews
💬
Reviews coming soon