thesammykins/pocket-id-provider
.agents/skills/pocket-id-provider/SKILL.md
Setup and integration of Pocket-ID, the passkey-first OIDC provider. Handles simple, secure identity for homelabs.
tools
Updated Apr 17, 2026
$ install --global
skillsauthnpx skillsauth add thesammykins/dotfiles pocket-id-providerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 5:35 AM6.1s1 file scanned
SKILL.md
- name:
- pocket-id-provider
- description:
- Setup and integration of Pocket-ID, the passkey-first OIDC provider. Handles simple, secure identity for homelabs.
- license:
- MIT
What I do
- Deploy
pocket-id/pocket-idwith persistence. - Configure OIDC Clients (Client ID, Secret, Redirect URIs).
- Setup Passkey (WebAuthn) users.
- Integrate Pocket-ID with Traefik (Forward Auth) or App Services.
When to use me
- When user needs "Simple SSO" or "Passkey Login" for self-hosted apps.
- When configuring
pocket-id. - Triggers: "pocket-id", "oidc", "passkey", "identity provider", "sso".
Instructions
1. Deployment
- Image:
pocket-id/pocket-id:latest. - Domain: MUST run on HTTPS (Passkeys requirement).
- Environment:
PUBLIC_URL:https://auth.example.com(Must match public access).
- Volume: Mount
/app/backend/datafor DB persistence.
2. Configuration
- First Run: Access UI to create the Admin user (Registers first passkey).
- Clients: Create a generic OIDC client.
- Redirect URI:
https://app.example.com/oauth/callback - Scopes:
openid,profile,email.
- Redirect URI:
3. Integration Patterns
- Traefik Forward Auth: Use a middleware (like
thomseddon/traefik-forward-authoroauth2-proxy) pointing to Pocket-ID's OIDC discovery endpoint (/.well-known/openid-configuration). - Direct Support: Apps like Grafana, Portainer, Audiobookshelf support OIDC directly. Use the Client ID/Secret there.
Related Skills
thesammykins/vercel-react-best-practices
development
VerifiedTrustedCommunity
React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
SKILL.mdUpdated Apr 17, 2026
thesammykins/ralph
development
VerifiedTrustedCommunity
Autonomous feature development - setup and execution. Triggers on: ralph, set up ralph, run ralph, run the loop, implement tasks. Two phases: (1) Setup - chat through feature, create tasks with dependencies (2) Loop - pick ready tasks, implement, commit, repeat until done.
SKILL.mdUpdated Apr 17, 2026
thesammykins/python-modern-standards
tools
VerifiedTrustedCommunity
Enforces the 2025 Python stack. Replaces legacy tools (pip, flake8, isort) with modern, fast equivalents (uv, ruff). Mandates strict type hints.
SKILL.mdUpdated Apr 17, 2026
thesammykins/prd
documentation
VerifiedTrustedCommunity
Generate a Product Requirements Document (PRD) for a new feature. Use when planning a feature, starting a new project, or when asked to create a PRD. Triggers on: create a prd, write prd for, plan this feature, requirements for, spec out.
SKILL.mdUpdated Apr 17, 2026