Search everything...

Stats

Actions

Available In

auth-identity

End-user authentication & identity team — 2 agents (auth-architect, auth-implementation-engineer) for adding login to a web app (React/Next), an API, and a dashboard. Methods: Google/Apple/Microsoft/GitHub social SSO, magic link, passkeys/WebAuthn, email+password — via managed auth (leaning Supabase Auth). 7 skills, 4 templates, a best-practices index, a scenarios bank (4 unverified field notes), an advisory anti-pattern hook, a stdlib JWT/scope/cookie analyzer (scripts/auth_analyze.py), and a web-verified knowledge bank with Mermaid decision trees (build-vs-buy, which-providers, OAuth-flow, token-storage, gate-the-dashboard, logout, refresh-reuse, MFA-factor, step-up auth). House rules: Authorization Code + PKCE never Implicit; never store tokens in localStorage; validate ID tokens server-side. Boundary: AUTHENTICATES the person; data-platform AUTHORIZES the data (RLS/embed-JWT); Entra seams to azure-cloud, auth code to security-reviewer. Requires ravenclaude-core@>=0.7.0.

Publisher marketplaceauth-identity@ravenclaude · marketplace and plugin share one repository (mcorbett51090/ravenclaude)

npx claudepluginhub mcorbett51090/ravenclaude --plugin auth-identity

Popularity

Stars

Above avg

Med: 0·Avg: 860

Copy clicks

Med: 0·Avg: 2

What's Inside

Agents2

auth-implementation-engineer

/auth-implementation-engineer

Use to IMPLEMENT the authentication design auth-architect chose — Supabase Auth + provider wiring, OAuth callback route, protected SPA routes, API token-verification middleware, secure cookie/session handling, token refresh/rotation, CSRF defense. NOT for choosing the provider/flow (the architect).

auth-architect

/auth-architect

CHOOSE the end-user auth approach for a web app + API + dashboard: build-vs-buy provider (leaning Supabase Auth), which OAuth/OIDC flow per client (Auth Code + PKCE, never Implicit), session-vs-JWT + token storage, and the identity→authorization(RLS) boundary. Wiring → auth-implementation-engineer.

Skills7

add-an-auth-provider

/add-an-auth-provider

Add a login method to an existing Supabase Auth app — Apple, Microsoft, GitHub social SSO, plus magic link, passkeys (WebAuthn), or email+password. The generic enable-provider procedure with each provider's gotchas (especially Apple's expiring ES256 secret + first-login name capture). Generalizes google-sso-setup to the variety pack.

authorization-rbac

/authorization-rbac

RBAC and ABAC in the application layer: defining roles and claims, mapping the authenticated identity to roles, enforcing roles in middleware and UI. The critical seam: row-level data scoping hands off to data-platform RLS via auth.uid(). Authentication proves identity; authorization controls access.

gate-the-dashboard

/gate-the-dashboard

Put the analytics dashboard and embedded BI behind login: app-shell login gate + session check + the handoff to data-platform's embed-JWT and RLS for per-user data isolation. The clearest expression of the auth-identity → data-platform seam.

google-sso-setup

/google-sso-setup

Wire Sign in with Google end-to-end: Google Cloud OAuth client + consent screen + redirect URIs + scopes, then via Supabase Auth's Google provider (and a note on the Auth.js / direct path). Step-by-step with verification checkpoints.

oauth-oidc-flow-design

/oauth-oidc-flow-design

Pick and implement the right OAuth 2.0 / OIDC flow by client type: Authorization Code + PKCE for SPA and native apps, confidential-client code flow for server-side apps, client-credentials for M2M. ID-token vs access-token vs refresh-token handling. Deprecated Implicit flow is never recommended.

Hooks1

Event Hooks

File writes

1 hook across 1 event

Stats

Version0.3.2

LanguageHTML

Stars4

Forks1

MaintenanceExcellent

LicenseMIT

Last CommitJul 14, 2026

AddedJul 19, 2026

Actions

View on GitHub View README Plugin Marketplace JSON Homepage

Own this plugin?

Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).

Available In

ravenclaude4

Safety Signals

Caution

Modifies files

Hook triggers on file write and edit operations

Uses power tools

Uses Bash, Write, or Edit tools

README

🐦‍⬛ RavenClaude

A private Claude Code plugin marketplace — bundled team rules, specialist agents, dispatch playbooks, and templates that travel with you across projects.

🚀 ▶ See what RavenClaude is (pitch.html) — the one-page pitch: the value prop, the proof, and the plugin catalog at a glance. Start here. (Or view the raw HTML source, or download and open locally — no server, no build step.)

🏠 ▶ Open the landing page (index.html) rendered in your browser — the front door: a navigable home with the plugin catalog, the specialist roster, and a comfort-posture starter. Regenerated from the manifests on every release.

(Or view the raw HTML source, or download and open locally — no server, no build step.)

🎛 ▶ Open the RavenClaude dashboard — point-and-click editor for your .ravenclaude/comfort-posture.yaml: set per-tool file, network, shell, and package autonomy across three levels (deny → ask → allow) — per layer (user / local / project) and per individual permission — without editing YAML by hand. (That link is the published, read-only preview; to use it for real — where Save & apply writes your repo's config — run rc dashboard from your project, the one canonical launcher across Claude Code, Copilot CLI, and a bare terminal.)

🖥 Working on this repo? Launch the functional local dashboard (where Save & apply actually writes this repo's config) with one command: bash scripts/open-dashboard.sh. It kills any running dashboard server, starts a fresh one, and opens it in your browser automatically. (VS Code users: a .vscode/tasks.json wired as the default build task — Ctrl/Cmd+Shift+B — runs the same script; .vscode/ is gitignored, so add it locally if you want the keybinding.)

📖 ▶ Open the RavenClaude portal — one self-contained page: browse every plugin, agent, skill, hook, rule, and template in the Marketplace section (with an “I want to…” use-case lookup), tune the comfort-posture Dashboard, and more. Regenerated from the manifests on every release.

(Or view the raw HTML source, or download and open locally — no server, no build step.)

🚀 ▶ First Workflow in 10 Minutes — install → dashboard → one governed multi-agent dispatch → /wrap. The canonical onboarding walkthrough. Start here if you've never used RavenClaude before.

🌐 ▶ Raven Power ↗ — the consulting front door behind RavenClaude. This marketplace is the proof-of-craft; the website is where the engagements live.

Today this marketplace ships 163 plugins:

ravenclaude-core — domain-neutral Team Lead + 14 specialists (architect, coders, reviewers, designer, documentarian, deep-researcher, project-manager, partner-success-manager, prompt-engineer, data-engineer, etc.), plus dispatch playbooks (with a Cross-plugin dispatch section), gates, 43 skills, 16 hooks, templates, and the cross-project contribution-staging loop.
power-platform — 11 Microsoft Power Platform specialists (Power Fx, flows, Power BI, Dataverse, model-driven, PCF, Copilot Studio, Power Pages, admin, ALM, tester), 21 skills, an advisory house-opinions hook covering 8 checks, and the bundled pbix-mcp MCP server.
finance — 7 corporate-finance & FP&A specialists (FP&A analyst, financial modeler, controller, treasury, valuation, audit-prep, board-pack composer), 9 skills, templates, advisory anti-pattern hook.
regulatory-compliance — 12 financial-regulatory specialists (6 function: AML/KYC, regulatory reporting, risk-and-controls, policy & procedure writer, examination prep, Bermuda-insurance; plus 6 jurisdiction: BMA, CIMA Cayman, Bahamas, Channel Islands, UK PRA, US), 10 skills, templates, defensive PII-scrub hook.
web-design — 7 web specialists (web architect, UX, visual, frontend implementer, content strategist, accessibility auditor, performance engineer) with WCAG 2.2 AA/AAA, Core Web Vitals, SEO/AEO, and Fluent + React discipline. 11 skills, templates, advisory web anti-pattern hook.
edtech-partner-success — 6 K-12 EdTech partner-success specialists (partner-success manager, success-playbook designer, learning-analytics analyst, QBR composer, partner-profile curator, FERPA comms translator) with 16 skills and a knowledge bank of operating cadences.

View full README on GitHub

More by mcorbett51090

generative-web-media

4·

AI multimedia for brand & winery sites: a creative brief -> on-brand, web-optimized, license-clean images/video/3D/audio behind a mandatory human curation gate. 4 agents (generation-strategist, web-asset-pipeline-engineer, asset-provenance-guardian, brand-and-accessibility-reviewer) route a brief to the right generator (provider-neutral, Grok-lean for images where competitive; inpaint/outpaint/bg-removal/upscale first-class), turn raw output into AVIF/WebP responsive <picture> markup with LCP/CLS-safe embeds, pin commercial-use licenses (flags the FLUX-dev non-commercial trap; C2PA + a provenance ledger; EU AI Act Art.50 disclosure), and gate every asset on brand-hex/style conformance + WCAG alt text before ship. 6 skills, 4 knowledge docs (Mermaid decision trees; all prices [unverified]), 6 best-practices, 4 commands, 5 templates, 4 scripts. The shared foundation the brand-identity-studio plugin consumes. Declarative fal MCP binding (set FAL_KEY). Requires ravenclaude-core@>=0.7.0.

v0.1.1

mcorbett51090

finance

4·

Corporate finance & FP&A specialist team — FP&A analyst, financial modeler, controller, treasury analyst, valuation analyst, audit-prep specialist, and board-pack composer. Ships 23 skills including the controller-autopilot: a governed close-to-report cycle (GAAP statements, COA mapping, reconciliation auto-match, review→approve→lock workflow, ELT staging, consolidation, per-entity dashboard, close schedules) plus its live-integration tier (multi-currency remeasurement + CTA, OAuth GL connectors + drill-through lineage, warehouse/RLS dashboard, IdP-backed segregation of duties) and a gold-standard NetSuite close (OAuth2 M2M + SuiteQL BS/IS trial balance, COA-draft, tie-out doctor, changed-after-sign-off drift, layperson runbook). 10 templates, a knowledge bank, and 2 advisory hooks (anti-patterns + secrets/PII scan). Inherits ravenclaude-core protocols (Grounding, Structured Output, Cited-Adjudicator).

v0.18.3

mcorbett51090

power-platform

4·1·

Power Platform specialist team — 11 agents (incl. power-platform-tester, power-bi-engineer) and 23 skills, with strong ALM/git coverage for solutions, flows, and PBIP. A house-opinions hook flags 8 §3/§4 violations; the knowledge bank carries production decision trees (PA-flow recovery, Dataverse token-acquisition, PCF React surface, PBI deploy/refresh, custom-connector build-path, PBIR Enhanced infinite-spinner debug + full build reference, DAX silent-zero scoring via the `Domain` pattern, sempy.fabric notebook reference, Power BI Copilot report-readiness, Code Apps connector gotchas, PBIP deployment variables + #839, PBIR reference enrichment, PBIP report fast-solve triage router [MCP-optional]) plus a real-engagement scenarios bank. Bundles the community pbix-mcp server (d0nk3yhm/pbix-mcp, MIT) for .pbix/.pbit read/write/DAX-eval (`pip install pbix-mcp`); documents (not bundles) the official Microsoft Dataverse MCP (CLAUDE.md §9a). Extends ravenclaude-core.

v0.44.7

mcorbett51090

project-management

4·

Project & delivery management team — four specialists across the predictive (PMBOK/PMP) and agile (Scrum/Kanban) tracks and the hybrid between: delivery-lead (charter, schedule, scope/change control, earned value), scrum-master (backlog, sprints, ceremonies, velocity, impediments), risk-and-raid-analyst (scored qual+quant risk, RAID depth, mitigation/contingency, issue triage), and stakeholder-comms-lead (stakeholder register, comms plan, status/exec reporting, escalation memos, steering packs). Deepens — does NOT replace — ravenclaude-core's domain-neutral project-manager (the lightweight RAID/status-hygiene default every plugin routes to); this is the deep PM craft layer. Knowledge: a predictive-vs-agile-vs-hybrid decision tree + a best-practices library. Seams: prose polish → ravenclaude-core/documentarian; system design → architect. Requires ravenclaude-core@>=0.7.0.

v0.4.1

mcorbett51090

ai-red-teaming

4·

AI/LLM red-teaming team — 2 agents (ai-redteam-lead, adversarial-testing-engineer) for the layer answering 'can this AI system be made to do harm, leak data, or exceed its authority — and how do we harden it?': threat modeling + rules of engagement, the attack taxonomy (OWASP LLM Top 10 2025 + MITRE ATLAS), direct vs indirect prompt injection, jailbreaks (roleplay/encoding/many-shot/crescendo), data exfiltration & training-data extraction, agentic tool-abuse / excessive agency, multimodal attacks, and defense-in-depth remediation. Fluent in automated red-team harnesses (PyRIT, Garak, Promptfoo red-team, Giskard) and likelihood×impact severity. 3 skills, a 2-doc knowledge bank (attack-taxonomy decision tree + 2026 patterns), and 2 templates. Distinct from llm-evaluation-engineering (quality-regression eval), trust-and-safety (content-moderation / T&S policy), and security-engineering (app/infra pentest) — the adversarial AI-security layer over model- and agent-based systems. Requires ravenclaude-core@>=0.7.0.

v0.2.0

mcorbett51090

auth-identity

Popularity

What's Inside

Confidence

README

🐦‍⬛ RavenClaude

Similar Plugins

fullstack-dev-skills

creative-writing

ecc

claude-council

More by mcorbett51090

generative-web-media

finance

power-platform

project-management

ai-red-teaming

🐦‍⬛ RavenClaude

More by mcorbett51090

generative-web-media

finance

power-platform

project-management

ai-red-teaming

Popularity

Health & Quality

Similar Plugins

fullstack-dev-skills

creative-writing

ecc

claude-council

octo

nature-skills