auth-ops
Authentication and authorization patterns - JWT, OAuth2, sessions, RBAC, ABAC, passkeys, MFA, identity-aware proxies, and Better Auth. Use for: authentication, jwt, oauth2, session, login, rbac, abac, passkey, mfa, totp, api key, token, cookie, csrf, bearer token, refresh token, oidc, cloudflare access, zero trust, Cf-Access-Jwt-Assertion, AUD tag, service auth, better auth.
Why this score
This repo hosts 10 skills, so its 68 stars are split between them (about 7 each) for scoring.
Popularity score: 57/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit fa93328d128d, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneauth-ops 0xDarkMatter/claude-mods · Skill | 57 | ★ 68 | ≈97 always | 21d ago |
| loom-auth cosmix/loom · Skill Both about auth and abac | 57 | ★ 62 | ≈28 always | 16d ago |
| auth-security majiayu000/spellbook · Skill Both about auth and jwt | 63 | ★ 288 | ≈40 always | 16d ago |
| api-auth-and-jwt-abuse yaklang/hack-skills · Skill Both about auth and jwt | 69 | ★ 2.5k | ≈46 always | 2mo ago |
| glowroot-ops glowroot/glowroot · Skill Both about ops | 80 | ★ 1.4k | ≈22 always | 16d ago |
| auth microsoft/apm · Skill Both about auth and token | 75 | ★ 4.0k | ≈20 always | 16d ago |