Does this skill support multi-factor authentication?

Yes, it includes specialized workflows for designing and implementing MFA systems, session management, and secure credential storage.

Can I use this for SOC 2 compliance?

Absolutely. The skill includes a dedicated Compliance Expert persona to help implement the auditing, logging, and data protection controls required for SOC 2.

Does it handle API security?

Yes, it provides implementation patterns for securing REST and GraphQL APIs using JWT, CORS policies, rate limiting, and input validation.

What authorization models are supported?

The skill supports various models including Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) for fine-grained permission management.

Security & Authentication Specialist

Name: Security & Authentication Specialist
Author: majiayu000

bymajiayu000

•

セキュリティとテスト

Orchestrates end-to-end security architectures, identity management systems, and regulatory compliance workflows for modern applications.

概要

The security-auth skill provides a comprehensive framework for engineering secure applications within Claude Code. It automates the design and implementation of complex authentication systems (OAuth 2.0, OIDC, MFA), authorization frameworks (RBAC/ABAC), and threat protection layers. By integrating expertise from security architects and compliance specialists, it ensures that your codebase adheres to industry standards like SOC 2 and GDPR while maintaining robust defense-in-depth strategies through proactive threat modeling and security monitoring.

主な機能

64 GitHub stars
Regulatory compliance auditing (SOC 2, ISO 27001, GDPR)
Secure API protection and cryptographic key management
Multi-factor authentication (MFA) and SSO integration
Automated threat modeling and risk assessment
Role-based and attribute-based access control (RBAC/ABAC)

ユースケース

Designing a zero-trust authentication system for a SaaS platform
Implementing SOC 2 compliant audit logging and security monitoring
Securing REST APIs with JWT-based authorization and rate limiting

概要

主な機能

64 GitHub stars
Regulatory compliance auditing (SOC 2, ISO 27001, GDPR)
Secure API protection and cryptographic key management
Multi-factor authentication (MFA) and SSO integration
Automated threat modeling and risk assessment
Role-based and attribute-based access control (RBAC/ABAC)

ユースケース

Designing a zero-trust authentication system for a SaaS platform
Implementing SOC 2 compliant audit logging and security monitoring
Securing REST APIs with JWT-based authorization and rate limiting