AI Blocks › Keep your code secure
Login and access builder
Describe your app's users. Get a login and permissions plan, or a review of the one you have.
Login and access builder is a free AI skill for the job "Keep your code secure". Give the instructions to an AI assistant that supports the required files and tools, then review its output.
Free · No account · CC BY 4.0 licence · Made by sickn33 · Level: advanced · Thinking: high
Made by sickn33. See the original on GitHub; we copied it as it is, with its licence.
What it does
A written plan for who can sign in to your app and what each person is allowed to do, or a review of the setup you already have. Login mistakes are costly, so the plan is explicit about every boundary. It starts by listing your users, accounts, sign-in flows and threats. Then it picks a method, such as sessions, tokens or single sign-on, and sets how long each token lasts. Next it designs roles and permission checks, and decides where each check runs. It finishes with how secrets are stored and rotated, what gets logged, and what is never logged. It works best when it can read your project files.
You give it
- A description of your app and its users
- Your current login code or setup (optional)
- The sign-in methods you want
- Any rules about who may see what (optional)
- Codebase (optional)
You get
- A login and session design
- A roles and permissions map
- Token lifetime and storage rules
- A list of security gaps to fix
Use it when
- You are adding sign-in, social login or single sign-on to an app.
- You need roles so admins, staff and customers see different things.
- Your API lets someone reach data that is not theirs, and you need to find why.
- You want a second look at your session or token setup before launch.
How to use it
- Add it to your AI once: download it and add the folder to Claude, ChatGPT or Codex as a skill.
- Ask for the job in your own words. Your AI opens the skill when it fits.
- It works best when your AI can read your project files.