How does it handle authentication security?

The skill enforces the use of NextAuth cookie sessions for web UI flows and actively discourages using localStorage for sensitive authentication tokens.

Does this skill automate testing and validation?

It guides the developer to run targeted checks including npm run lint, npm test, and npm run build to ensure that any changes are stable and compliant before submission.

What is the primary purpose of the nrpg-workflow skill?

It ensures all code changes in the NRPG repository follow specific security standards regarding authentication, multi-tenant isolation, and contractor privacy.

Can it help with multi-tenant data safety?

Yes, it includes specific guardrails to prevent exposing contractor identities to clients and ensures that browsing or searching contractors is restricted via role-based access.

NRPG Platform Workflow Guardrails

Name: NRPG Platform Workflow Guardrails
Author: CleanExpo

byCleanExpo

•

安全与测试

Enforces repository-specific security conventions and multi-tenant privacy standards for the NRPG platform.

The nrpg-workflow skill provides a robust set of development guardrails designed specifically for the NRPG platform to ensure security and privacy compliance. It guides Claude to prioritize NextAuth cookie-based sessions over insecure localStorage tokens and mandates server-side authentication checks in API routes. Beyond security, the skill protects contractor privacy by preventing the exposure of identities to unauthorized clients and enforces multi-tenant safety. By automating the scanning of authentication patterns and integrating standard quality checks like linting and testing, it streamlines the implementation of production-ready changes.

主要功能

01Multi-tenant privacy protection for contractor identities

02Standardized deployment readiness checks (lint, test, build)

031 GitHub stars

04Enforcement of NextAuth cookie-based session management

05Automated scanning for insecure local storage token usage

06Server-side role-based access control (RBAC) validation

使用场景

01Refactoring frontend authentication to comply with server-side session standards

02Implementing new API endpoints with strict multi-tenant isolation

03Validating code changes against repository-specific linting and testing requirements

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add cleanexpo/disaster-recovery nrpg-workflow

For use in Claude.ai and ChatGPT

Download Skill