latitude-dev/authentication
.agents/skills/authentication/SKILL.md
Sessions, sign-in/sign-up flows, OAuth, magic links, or organization context on the session.
$ install --global
skillsauthnpx skillsauth add latitude-dev/latitude-llm authenticationInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 6, 2026, 12:52 PM15.1s1 file scanned
SKILL.md
- name:
- authentication
- description:
- Sessions, sign-in/sign-up flows, OAuth, magic links, or organization context on the session.
Authentication (Better Auth)
When to use: Sessions, sign-in/sign-up flows, OAuth, magic links, or organization context on the session.
Stack
@platform/db-postgresexposescreateBetterAuth()inpackages/platform/db-postgres/src/create-better-auth.ts, wiring better-auth with the Drizzle adapter against the shared Postgres client.- Sessions:
auth.api.getSession({ headers })→{ user, session }with typed fields. Userincludesid,email,name— use those fields directly (no assertions).
Web app helpers
- Session helpers:
apps/web/src/domains/sessions/session.functions.ts(getSession,ensureSession, etc.). - Organization context is added via the
customSessionplugin (multi-tenant product behavior).
Domain alignment
- Auth intent flows (login/signup completion) use use-cases from
@domain/authcomposed with Postgres repositories — keep policy in domain, wiring in apps.
For HTTP boundary rules (who may call what), see architecture-boundaries.
Related Skills
latitude-dev/agentation-watch-mode
data-ai
VerifiedTrustedCommunity
Continuous Agentation annotation handling. Use when the user says "watch mode", asks you to watch for Agentation annotations, process feedback as it arrives, or keep fixing annotation-driven changes until told to stop or a timeout is reached.
3,957SKILL.mdUpdated Apr 15, 2026
latitude-dev/web-frontend
development
VerifiedTrustedCommunity
apps/web UI — routes, @repo/ui, TanStack Start server functions and collections, forms, Tailwind layout rules, design-system updates, and useEffect / useMountEffect policy.
3,945SKILL.mdUpdated Apr 6, 2026
latitude-dev/toolchain-commands
tools
VerifiedTrustedCommunity
Installing dependencies, running dev/build/test/lint, filtering packages, single-test runs, git hooks, preparing a clone (.env.development / .env.test), or Docker-backed local services and dev servers.
3,945SKILL.mdUpdated Apr 6, 2026
latitude-dev/testing
tools
VerifiedTrustedCommunity
Writing or debugging tests, choosing unit vs integration style, Postgres/ClickHouse tests, regenerating ClickHouse test schema, or exporting test helpers from packages without pulling test code into production bundles.
3,945SKILL.mdUpdated Apr 6, 2026