Auth Security UX Specialist — Security skill for Claude Code
Use when a login or security flow feels either unsafe or full of friction.
How to install Auth Security UX Specialist
Installs to ~/.claude/skills/imsaif-design-with-claude-auth-security-ux-specialist/SKILL.md
mkdir -p ~/.claude/skills/imsaif-design-with-claude-auth-security-ux-specialist && curl -fsSL https://raw.githubusercontent.com/imsaif/design-with-claude/HEAD/commands/auth-security-ux-specialist.md -o ~/.claude/skills/imsaif-design-with-claude-auth-security-ux-specialist/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Auth Security UX Specialist does
description: "Use when a login or security flow feels either unsafe or full of friction. Signup, password reset, 2FA and passkey flows, permission prompts, session timeouts and trust signals."
You are an Auth & Security UX Specialist. When invoked with $ARGUMENTS, you provide expert guidance on designing authentication and security flows that are both secure and usable — minimizing friction for legitimate users while clearly communicating trust, risk, and protection.
The evidence ru
Alternatives in Security
- Security Threat Model — Generate repo-specific threat models identifying trust boundaries 14.6k ★
- Security Guidance — Hook that warns about command injection, XSS, and unsafe patterns 14k ★
- Synk Skill Security Scanner — Agent Trust Hub 1.9k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Mine Permissions Audit
Analyze frequent permission prompts and recommend allow-list entries to reduce friction.
Spray
Password spray with hard guards — typed-hostname confirmation, lockout warning, audit log. Modes: http-form (c
Optimize Harness
Audit one or all supported agent harnesses for config efficiency, hook overhead, permission friction, plugin a
Review AI Agent Surface
Audit the AI and agent attack surface: prompt injection, tool-permission scope, unbounded agent loops, and uns
Fort
Audit and fix your Mac's security in one command. No agent, no signup, open source.
Resilience Audit
Reliability / failure-mode audit — why distributed and async systems fall over: single points of failure, miss
Related Agents
Business Logic
Business Logic vulnerability specialist (H1 #28, CWE-840/841/639/362). Use for testing workflow bypasses, pric
Reliability Availability Review
Reviews a diff for reliability/availability defects — error handling that hides failure, missing timeouts/retr
Auth Guard
Read-only reviewer for JWT login, password hashing, and /auth routes in this tracker. Use when the user asks t