moai-platform-auth
Authentication and authorization specialist covering Auth0, Clerk, and Firebase Auth. Use when implementing authentication, MFA, SSO, passkeys, WebAuthn, social login, or security features.
Authentication and authorization specialist covering Auth0, Clerk, and Firebase Auth. Use when implementing authentication, MFA, SSO, passkeys, WebAuthn, social login, or security features.
Authentication and authorization specialist covering Auth0, Clerk, and Firebase Auth. Use when implementing authentication, MFA, SSO, passkeys, WebAuthn, social login, or security features.
OWASP Top 10 security checklist, authentication patterns, input validation, and HTTP security headers reference. Agent-extending skill that amplifies expert-security and expert-backend expertise with production-grade security patterns. NOT for: frontend UI, DevOps deployment, performance optimization, testing strategy.
Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot
ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.
Automated daily security audits for OpenClaw agents with email reporting. Runs deep audits and sends formatted reports.
Audit Kubernetes RBAC, enforce policies, and manage secrets. Use for security reviews, permission audits, policy enforcement with Kyverno/Gatekeeper, and secret management.
Use when implementing or troubleshooting Obfuz feature workflows โ code obfuscation and protection in F8Framework.
ๅฏนๅ็ซฏไปฃ็ ่ฟ่กๅฎๅ จๅฎก่ฎก๏ผๆฃๆต XSSใCSRF ็ญๆผๆดใๅฝ็จๆท่ฏทๆฑไปฃ็ ๅฎกๆฅๆ่ฏข้ฎไปฃ็ ๅฎๅ จๆงๆถไฝฟ็จใ
Handle biometric authentication delegation (fingerprint, face recognition) when the Agent Phone lacks biometric hardware.
Handle account login credential delegation from Human Phone. Covers username/password entry, social sign-in walls, and multi-step login flows.
Handle SMS verification codes and 2FA TOTP codes from Human Phone. Covers OTP entry, code verification, and multi-factor authentication flows.
้ฃไนฆ OAuth ่ฎค่ฏๅ User Access Token ็ฎก็๏ผDevice Flow๏ผRFC 8628๏ผใ ๆฏๆไธ้ฎๅๅปบ้ฃไนฆๅบ็จ๏ผconfig create-app๏ผใauth check ้ขๆฃ scopeใ auth login ็ปๅฝใToken ่ชๅจๅทๆฐใๆ ้้ ็ฝฎไปปไฝ้ๅฎๅ URL ็ฝๅๅใ ๅฝ็จๆท่ฏทๆฑ"็ปๅฝ้ฃไนฆ"ใ"่ทๅ Token"ใ"OAuth ๆๆ"ใ"auth login"ใ"่ฎค่ฏ"ใ "ๆ็ดข้่ฆไปไนๆ้"ใ"Token ่ฟๆไบ"ใ"ๅทๆฐ Token"ใ"ๅๅปบๅบ็จ"ใ"create-app"ใ "็ผบๅฐๆ้"ใ"99991672"ใ"99991679"ๆถไฝฟ็จใ ๅฝๅ ถไป้ฃไนฆๆ่ฝ๏ผtoolkit/msg/read ็ญ๏ผ้ๅฐ User Access Token ็ธๅ ณ้ฎ้ขๆถ๏ผไนๅบๅ่ๆญคๆ่ฝใ
Install cuOpt for C โ conda, locate lib/headers, verification. Use when the user is installing or verifying the C API. Standalone; no common skill.
Install cuOpt for Python โ pip, conda, Docker, verification. Use when the user is installing or verifying the Python API. Standalone; no common skill.
Use when implementing privacy manifests, requesting permissions, App Tracking Transparency UX, or preparing Privacy Nutrition Labels - covers just-in-time permission requests, tracking domain management, and Required Reason APIs from WWDC 2023
Use when implementing app integrity verification, preventing fraud with DCAppAttestService, validating requests from legitimate app instances, using DeviceCheck for promotional abuse prevention, or needing server-side attestation/assertion validation. Covers key generation, attestation, assertion, rollout strategy, and risk metrics.
Use when preparing ANY app for App Store submission, responding to App Review rejections, or running a pre-submission audit. Covers privacy manifests, metadata requirements, IAP review, account deletion, SIWA, age ratings, export compliance, first-time developer setup.
Use when needing synchronous actor access in tests, legacy delegate callbacks, or performance-critical code. Covers MainActor.assumeIsolated, @preconcurrency protocol conformances, crash behavior, Task vs assumeIsolated.