セッション認証、ソーシャルプロバイダー、CSRF保護、セキュアクッキーパターンを提供します。
このスキルは、Webアプリケーション向けのセッションベース認証を実装するためのルールとパターンを定義します。API間通信でのみJWTを使用し、それ以外はセッション認証を推奨します。GoogleとGitHubのソーシャルプロバイダーを最低限サポートし、マジックリンクをパスワードの代替として採用することで、よりシンプルでセキュアな認証フローを実現します。ロールベースのアクセス制御（`user.role` フィールド）とミドルウェアによるルート保護、全ミューテーションエンドポイントに対するCSRF保護、そして`httpOnly`、`secure`、`sameSite: "lax"`、適切な`maxAge`といったセキュアクッキー設定を必須とします。また、リフレッシュトークンのローテーションや、localStorageへのトークン保存禁止、サーバーサイドバリデーションなしのクライアントサイドロールチェック回避など、セキュリティ上のベストプラクティスにも焦点を当てています。
npx skills add https://github.com/YepAPI/skills/tree/HEAD/skills/authuser.role フィールドとミドルウェアチェックhttpOnly、secure、sameSite: "lax"、適切なmaxAgeThis repo contains 20 individual skills — each has its own dedicated page.
WCAG 2.1 AA — semantic HTML, keyboard navigation, screen readers.
Experiment setup, variant splitting, statistical significance, and feature flag integration.
CRUD generators, data tables, user management, role-based access, and bulk operations.
Monitor what ChatGPT and Gemini say about your brand using YepAPI.
Queue workers with BullMQ/Inngest/Trigger.dev, job retries, dead letter queues, concurrency.
Commander.js, interactive prompts with Clack, spinners, colors, config files, exit codes, and npm publishing.
cmdk integration, Cmd+K trigger, fuzzy search, grouped actions, keyboard navigation, and dynamic action registration.
Content planning with trend and sentiment data from YepAPI.
Content calendar, keyword-driven planning, and content briefs.
Theme switching with CSS variables, system preference detection, next-themes, and persistence.
Threaded comments, @mentions, reactions, moderation queue, optimistic UI, and cursor pagination.
Competitive analysis between domains using YepAPI.
Layout grids, KPI cards, data tables with sorting/filtering, sidebar navigation, and responsive breakpoints.
Data encryption — TLS everywhere, AES-256-GCM for PII, bcrypt passwords, encrypted backups.
Chart patterns with Recharts/Nivo/D3, responsive containers, color scales, and accessibility.
Drizzle schema definition, push vs migrate, type-safe queries, relations, transactions, and prepared statements.
Upload handling, resize/compress, CDN delivery, blur placeholders, and next/image patterns.
Local business and Google Maps research using YepAPI.
Cursor-based pagination, IntersectionObserver, virtualized lists with @tanstack/react-virtual, and scroll position restoration.
Chat UI components, streaming responses with AI SDK, context window management, and RAG patterns.
ElevenLabs text-to-speech with mac-style say UX.
Oracle CLI second-model review/debug/refactor/design with selected files, dry-run token checks, API or browser engine.
Capture and automate macOS UI with the Peekaboo CLI.
Generate multiple radically different interface designs for a module using parallel sub-agents. Use when user wants to design an API, explore interface options, compare module shapes, or mentions "design it twice".
Build a throwaway prototype to flesh out a design — a runnable terminal app for state/business-logic questions, or several radically different UI variations toggleable from one route.
Interview the user relentlessly about a plan or design until reaching shared understanding, resolving each branch of the decision tree. Use when user wants to stress-test a plan, get grilled on their design, or mentions "grill me".