Auth0 Agent Skills plugin

Q: How do I install it in Claude Code?

Run /plugin install auth0@claude-plugins-official or find Auth0 under Discover in /plugin. Outside a session use claude plugin install auth0@claude-plugins-official.

Q: How do I install it in other agents?

With npx skills add auth0/agent-skills. Add --agent for specific agents, for example --agent claude-code cursor, or --agent github-copilot for Copilot.

Q: How is the right SDK chosen?

The skill's router reads package.json, requirements.txt, build.gradle and other files, detects the framework and loads its reference files.

Q: What if the skill does not trigger?

Call it explicitly: /auth0 . Naming the skill removes the selection step.

Q: What happened to the earlier per-SDK skills?

There used to be one skill per SDK and framework. A single auth0 skill with a router now replaces them.

Auth0's official skill: it detects the project framework and adds authentication step by step through the right SDK.

58 ★ on the repository
Last commit Oct 30, 2026
Apache-2.0

Plugin

auth0/agent-skillsAuthor:Auth0

Install

Works in: Claude Code
Cursor
Codex
GitHub Copilot
Gemini CLI

In your terminal, with SkillFoxx CLI

npx skillfoxx add plugins/auth0-agent-skills

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Extended accessThe tool runs code or makes network calls and only reads external data.

The skill installs dependencies, creates login routes and writes authentication environment variables into the project.

This is third-party code. Review the repository files before installing.

What it does

A single `auth0` skill helps an assistant wire up Auth0 correctly. When you ask to add Auth0 login, the assistant loads the skill and its router reads your project files: `package.json`, `requirements.txt`, `build.gradle` and others. It detects the framework, loads matching reference files, for example for Next.js, and then follows step-by-step instructions: installs the right SDK, creates auth routes, configures environment variables and wires up login and logout. Nothing has to be chosen by hand. If the assistant misses the skill, trigger it explicitly with `/auth0`, which removes the selection step. Earlier versions shipped one skill per SDK or framework and a single router skill replaced them. It works in Claude Code, Cursor, Codex, Antigravity, Gemini CLI, GitHub Copilot and other Agent Skills agents.

Who it is for. Developers adding Auth0 authentication to an app who want the assistant to pick the right SDK and configure the routes itself.

Good fit when

You need to add Auth0 login to a Next.js, React, Express or other framework project.
The assistant did not pick the skill up and you call it with `/auth0`.
You want to ask how to set brand colours in Auth0: `/auth0 how do I configure brand colors in Auth0?`.
A project uses the earlier per-SDK skills and moves to the single one.

Not a fit when

You do not use Auth0 and picked another login provider.
You need a security audit of an existing tenant: the skill wires up login and does no audit.
You have no Auth0 account: a free one is required.

Example request

Add Auth0 login to my app.

Limitations

It needs an Auth0 account, and a free one is enough. On smaller, faster models and in sessions with many other skills the assistant sometimes misses this skill on open questions like "how do I...", though it responds reliably to direct instructions. Then use the explicit `/auth0` call. The skill changes project files: it installs dependencies, creates routes and writes environment variables, so work in a git branch and keep secrets out of commits. For Codex the plugin reaches the public ChatGPT catalogue only after OpenAI approval; until then add it through the repository marketplace.

How to disable. Remove the plugin with Claude Code or `npx skills remove auth0`. Roll back dependencies and routes the skill added to the project through git.

FAQ

How do I install it in Claude Code?

Run `/plugin install auth0@claude-plugins-official` or find Auth0 under Discover in `/plugin`. Outside a session use `claude plugin install auth0@claude-plugins-official`.

How do I install it in other agents?

With `npx skills add auth0/agent-skills`. Add `--agent` for specific agents, for example `--agent claude-code cursor`, or `--agent github-copilot` for Copilot.

How is the right SDK chosen?

The skill's router reads `package.json`, `requirements.txt`, `build.gradle` and other files, detects the framework and loads its reference files.

What if the skill does not trigger?

Call it explicitly: `/auth0 <your question>`. Naming the skill removes the selection step.

What happened to the earlier per-SDK skills?

There used to be one skill per SDK and framework. A single `auth0` skill with a router now replaces them.

Discussion

No questions or reviews yet.

Plugins

Arcjet skills: protect routes and agent tool calls

Arcjet skills

Official

Five agent skills that wire Arcjet protection into JavaScript: rate limits, bots, Shield, prompt injection and guards on tool calls

SkillExtended access700

VibeSec

VibeSec-Skill

A secure coding skill: the agent looks at code from a bug hunter's perspective and prevents common web vulnerabilities

SkillMinimal access1.4K

Cybersecurity Skills

Cybersecurity Skills for AI Agents

42 security skills for Claude Code, Cursor and Codex: code and cloud audits, authorization-gated pentesting and incident response

SkillBroad access517

Skill Scanner

A security scanner for agent skills: finds prompt injection, data exfiltration and malicious code before you install

CLIExtended access2.7K

AgentGuard

AgentGuard checks a coding agent's actions before they run and scans third-party skills for secrets, backdoors and injections.

PluginExtended access494

security-audit

Editors’ pick

A code security audit skill by Cloudflare: the agent runs recon, coverage-led hunting and independent verification of findings, then produces a structured repor

SkillExtended access71.5K11

README in short

The repository holds plugin manifests for Claude Code, Cursor, Codex and Antigravity, the skill itself and activation and behaviour evaluation suites. Documentation and quickstarts live on the Auth0 site.

README badge

Original SKILL.md

---
name: auth0
description: Use when adding, fixing, or improving how an app authenticates users or protects an API, or when using or configuring any Auth0 feature — signing users in and out, sessions and tokens, guarding routes and endpoints, MFA, passwordless passkey login (WebAuthn), SSO, Organizations, RBAC, custom domains, Universal Portals for hosted account and organization self-service, or Universal Login branding. Also use to audit a tenant's health, security, and plan fit (CheckMate), to debug why an auth flow fails, to migrate from another auth provider, or to set up the Vercel native integration. Covers any web, mobile, or backend framework and every Auth0 SDK, tool, and API. Use even if the user never mentions Auth0.
license: Apache-2.0
metadata:
  author: Auth0 <support@auth0.com>
  version: '2.8.0'
  openclaw:
    emoji: "\U0001F510"
    homepage: https://github.com/auth0/agent-skills
    requires:
      bins:
        - auth0
    os:
      - darwin
      - linux
    install:
      - id: brew
        kind: brew
        formula: auth0
        bins: [auth0]
        label: 'Install Auth0 CLI (brew)'
---

# Auth0

Detect intent → detect framework → detect tooling → load 2–3 reference files.

---

## Step 1: Detect intent

Match the request against the **What the developer wants** column — it describes
the goal in plain language, not just the Auth0 term. The **Intent** you pick is a
lookup key: in **Step 4** it appears verbatim as a section heading
(`### feature:mfa`) listing which reference files to load.

| What the developer wants (plain language + Auth0 term) | Intent |
|---|---|
| Add login, signup, sign-in, "let users log in / create accounts" to an app, or otherwise add and use an Auth0 SDK in an app or script | **integrate** |

Report a problem