auth-hardening

@goldenwing-360 · 收录于 1 周前

Apply modern authentication standards instead of historical mistakes. Covers NIST 800-63B-aligned passphrase policy (no rotation theatre), MFA enforcement and factor tiering, session versus JWT tradeoffs, OAuth scope minimization, and account lockout that does not enable enumeration. Invoke when building auth from scratch, planning MFA rollout, or handling a credential-stuffing wave.

场景认证设计安全审计密码策略

适合你，如果你正在构建或审计用户认证系统

/ 下载安装

https://github.com/GoldenWing-360/claude-security-skills/tree/main/auth-hardening ↗

/ 通过 npx 安装 校验哈希

npx oh-my-skill add goldenwing-360/claude-security-skills/auth-hardening

/ 通过 bash 安装

curl -fsSL https://oh-my-skill.com/install.sh | bash -s -- goldenwing-360/claude-security-skills/auth-hardening

/ 已经装过?验证本机副本,不用重装

npx oh-my-skill verify goldenwing-360/claude-security-skills/auth-hardening

安装目标可用 --agent / --scope 或 --to 明确指定;省略时只会在唯一已存在的 agent 目录上自动选择,零命中或多命中会停止并提示。content_hash 缺失或不一致均拒装。

13GitHub stars

~2.4K上下文体积 · 单文件

索引托管

登录即可评论;带「已验证安装」的,是发布者名下有本店的安装或持有记录。

…