auth0/agent-skills
7 skills6.8k installs182 starsGitHub
Install
npx skills add https://github.com/auth0/agent-skillsSkills in this repo
1Auth0 QuickstartAuth0 Quickstart is an agent skill that encodes the Auth0 CLI end to end for solo builders adding login to web apps. It walks through installation on macOS, Linux, and Windows, browser-based login, and tenant selection so an agent does not improvise fragile curl one-liners. Application recipes cover SPA types for React/Vue/Angular with localhost callback and CORS-related URLs, plus regular web apps for Next.js or Express with server-side callback paths. Commands are copy-ready for creating apps, setting allowed URLs, and attaching metadata for automation audit trails. Use it when you need a consistent Auth0 footprint during integration rather than clicking through the dashboard for every environment. Pair with your framework’s Auth0 SDK docs for application code; this skill centers on tenant and application provisioning via CLI.2kinstalls2Auth0 NextjsAuth0-nextjs is an agent skill that encodes common Auth0 integration patterns for Next.js applications so solo builders can ship login flows and secured API access without re-deriving SDK usage from scattered docs. It covers custom login entry points with return URLs, programmatic navigation to the auth login route, and server-side retrieval of access tokens for calling external APIs with proper 401 handling. The skill explains silent authentication across sessions using refresh tokens and how to force re-login when security policies require it. It also documents advanced Auth0Client configuration—including scopes, audience, and authorization parameters—wired through environment variables for domain, client ID, client secret, and application base URL. Use it while building SaaS dashboards, BFF layers, or any Next.js product that must gate routes and propagate OIDC tokens to downstream services. It is template-oriented procedural knowledge for coding agents, not a hosted identity provider itself.1.3kinstalls3Auth0 ReactAuth0 React is an API-reference skill for solo builders shipping SaaS frontends who need correct @auth0/auth0-react setup the first time. It concentrates on Auth0Provider configuration: required tenant domain and client ID, authorization parameters for API audiences and scopes, forced connections, localization, and signup hints. Token behavior is spelled out—where sessions live in memory versus localStorage, when to enable refresh tokens and fallbacks, and how popup-based interactive handlers support MFA. Callback and redirect options help you finish login flows without breaking deep links. Use it while scaffolding auth in Build, before you harden Ship/security reviews or tune Launch onboarding. It is reference material, not a replacement for Auth0 dashboard tenant setup or server-side API validation. Keep client secrets out of the browser and align audience values with your backend resource identifier.1.1kinstalls4Auth0 React Nativeauth0-react-native is an agent skill that walks solo builders through adding Auth0 to React Native and Expo (non-managed-plugin path) using react-native-auth0. It covers SDK installation, environment configuration, and pointers to automated Auth0 CLI setup versus manual .env flows, while explicitly routing Expo managed workflow, React SPAs, Next.js, and pure backend JWT validation to sibling Auth0 skills. Use it in the build phase when you need OAuth/OIDC sign-in on iOS and Android with native deep linking rather than reinventing mobile auth. Getting the wrong skill for Expo or web wastes days on incompatible plugins; this skill keeps agents on the native RN integration path and defers tenant creation to auth0-quickstart when needed.714installs5Auth0 Expressauth0-express is an agent skill for solo builders shipping Node/Express SaaS who need hosted login without rolling their own OAuth. It documents install and view-engine setup, middleware expectations, and common route patterns so your coding agent can scaffold login, logout, and session-aware pages consistently. Use it while implementing backend auth during Build—not for marketing or growth work. The snippets emphasize EJS rendering with authenticated vs anonymous states, dashboard protection with requiresAuth(), and login flows that honor a return URL after Auth0 completes. It also shows how to read the OIDC user object and tokens from req.oidc for APIs or debug endpoints. Pair it with your Auth0 tenant configuration and environment secrets; the skill focuses on Express wiring rather than dashboard policy design.597installs6Auth0 MfaAuth0 MFA is an agent skill that walks solo builders through adaptive multi-factor authentication using Auth0 Actions on the Post Login trigger. Instead of a one-size-fits-all MFA prompt, you compose JavaScript handlers that require step-up when admins sign in, when the device looks new, when geographic signals diverge from stored user metadata, or when clients request high-risk OAuth scopes such as fund transfers or admin writes. The skill assumes you already use Auth0 for identity and need production-grade guardrails without rebuilding your entire auth stack. It is best invoked while wiring tenant security before launch or when compliance asks for conditional MFA rather than global enforcement. Outputs are copy-ready Action bodies you paste into the Auth0 dashboard, with clear branching on whether MFA already completed in the current session. You still must map roles, metadata, and scope names to your real API— the patterns are templates, not drop-in compliance. After implementation, validate flows in staging with test users and document which conditions force MFA so support and audit trails stay understandable.580installs7Auth0 Angularauth0-angular is an agent skill from Auth0 that walks solo builders through adding authentication to Angular 13+ single-page applications using the @auth0/auth0-angular SDK. Install it when you are building a SaaS or customer-facing web app and need hosted login, protected routes, and API calls that attach access tokens automatically. The skill sequences npm install, environment.ts Auth0 settings, Auth module configuration for standalone or NgModule patterns, and points to deeper setup scripts when using the Auth0 CLI. It assumes an Auth0 tenant and application already exist, and directs newcomers to auth0-quickstart first. AngularJS, React Native, and pure backend JWT middleware are out of scope so agents do not apply the wrong SDK. Outcome is a working SPA auth layer aligned with Auth0 SPA best practices.520installs