세션 인증, 소셜 프로바이더, CSRF 보호 및 안전한 쿠키 패턴을 제공합니다.
이 스킬은 웹 애플리케이션을 위한 세션 기반 인증 구현을 안내하며, API 간 인증에만 JWT를 사용하도록 권장합니다. Google 및 GitHub 소셜 로그인, 매직 링크, 역할 기반 접근 제어를 지원하며, CSRF 보호와 안전한 쿠키 설정을 통해 보안을 강화합니다. 또한 리프레시 토큰 로테이션을 통해 토큰의 수명을 제한하여 보안 위험을 최소화합니다. 주로 Node.js 기반 웹 프레임워크(예: Express, Next.js)와 함께 사용되며, 클라이언트 측 저장소 대신 httpOnly 쿠키 사용을 강조합니다.
npx skills add https://github.com/YepAPI/skills/tree/HEAD/skills/authuser.role 필드와 미들웨어 검사 사용httpOnly, secure, sameSite: "lax", 적절한 maxAgelocalStorage에 토큰 저장 — httpOnly 쿠키 사용bcrypt/argon2 사용This repo contains 20 individual skills — each has its own dedicated page.
WCAG 2.1 AA — semantic HTML, keyboard navigation, screen readers.
Experiment setup, variant splitting, statistical significance, and feature flag integration.
CRUD generators, data tables, user management, role-based access, and bulk operations.
Monitor what ChatGPT and Gemini say about your brand using YepAPI.
Queue workers with BullMQ/Inngest/Trigger.dev, job retries, dead letter queues, concurrency.
Commander.js, interactive prompts with Clack, spinners, colors, config files, exit codes, and npm publishing.
cmdk integration, Cmd+K trigger, fuzzy search, grouped actions, keyboard navigation, and dynamic action registration.
Content planning with trend and sentiment data from YepAPI.
Content calendar, keyword-driven planning, and content briefs.
Theme switching with CSS variables, system preference detection, next-themes, and persistence.
Threaded comments, @mentions, reactions, moderation queue, optimistic UI, and cursor pagination.
Competitive analysis between domains using YepAPI.
Layout grids, KPI cards, data tables with sorting/filtering, sidebar navigation, and responsive breakpoints.
Data encryption — TLS everywhere, AES-256-GCM for PII, bcrypt passwords, encrypted backups.
Chart patterns with Recharts/Nivo/D3, responsive containers, color scales, and accessibility.
Drizzle schema definition, push vs migrate, type-safe queries, relations, transactions, and prepared statements.
Upload handling, resize/compress, CDN delivery, blur placeholders, and next/image patterns.
Local business and Google Maps research using YepAPI.
Cursor-based pagination, IntersectionObserver, virtualized lists with @tanstack/react-virtual, and scroll position restoration.
Chat UI components, streaming responses with AI SDK, context window management, and RAG patterns.
ElevenLabs text-to-speech with mac-style say UX.
Oracle CLI second-model review/debug/refactor/design with selected files, dry-run token checks, API or browser engine.
Capture and automate macOS UI with the Peekaboo CLI.
Generate multiple radically different interface designs for a module using parallel sub-agents. Use when user wants to design an API, explore interface options, compare module shapes, or mentions "design it twice".
Build a throwaway prototype to flesh out a design — a runnable terminal app for state/business-logic questions, or several radically different UI variations toggleable from one route.
Interview the user relentlessly about a plan or design until reaching shared understanding, resolving each branch of the decision tree. Use when user wants to stress-test a plan, get grilled on their design, or mentions "grill me".