Agent skill
account-security
Account security - MFA, sessions, recovery. Use when protecting user accounts.
Install this agent skill to your Project
npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/other/account-security-sylphxai-flow
SKILL.md
Account Security Guideline
Tech Stack
- Auth: Better Auth
- Framework: Next.js (with Turbopack)
- Database: Neon (Postgres)
Non-Negotiables
- MFA required for admin/super_admin roles
- Sensitive actions require step-up re-authentication (password or email OTP)
- Verified session state must be scoped, time-bound, never implicitly reused
- Session/device visibility and revocation must exist
- All security-sensitive actions must be server-enforced and auditable
- Account recovery must require step-up verification
Context
Account security handles how users manage sessions — visibility, revocation, step-up verification, MFA. Sign-in and SSO live in auth.
This is the SSOT for MFA policy. Admin and other privileged roles reference this.
Driving Questions
- Can users see all active sessions and revoke them?
- Is re-authentication required for all sensitive actions?
- What happens when an account is compromised?
- How does the recovery flow prevent social engineering?
- What security events trigger user notification?
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
Didn't find tool you were looking for?