Use when code stores or checks a password, resets one, verifies an email address, enrols a second factor or generates a token that proves something (session id, reset link, verification code): validation, password hashing and rehashing, enumeration and throttling, single-use hashed tokens, TOTP and recovery codes, random values.
no risky patterns detected
Type: Agent skill (SKILL.md) · Category: Communication · Source: https://github.com/techmefr/mentis/tree/HEAD/skills/credential-lifecycle-pitfall
| Capabilities (fewer powerful permissions = higher) | 50/50 |
| Maintenance | 23/35 |
| Documentation | 15/15 |
Always review files before installing. How scores work. Request a correction