Use when adding multi-factor authentication (MFA/2FA) or requiring additional verification for sensitive operations - covers step-up auth, adaptive MFA, and risk-based authentication with Auth0
82
Does it follow best practices?
If you maintain this skill, you can automatically optimize it using the tessl CLI to improve its score:
npx tessl skill review --optimize ./path/to/skillEvaluation — 98%
↑ 1.42xAgent success when using this skill
Validation for skill structure
React step-up auth hook
Correct acr_values URL
0%
100%
AMR claim check
100%
100%
max_age: 0 used
100%
100%
Silent step-up first
100%
100%
cacheMode off
100%
100%
Fallback to loginWithRedirect
100%
100%
Returns false on redirect
100%
100%
Auth0 React package
100%
100%
Verification state tracking
0%
100%
Reusable hook structure
100%
100%
Without context: $0.2793 · 1m 37s · 15 turns · 18 in / 5,458 out tokens
With context: $0.4779 · 1m 30s · 22 turns · 2,201 in / 4,896 out tokens
Node.js backend MFA validation
express-jwt package
0%
100%
jwks-rsa integration
0%
100%
RS256 algorithm
0%
100%
JWKS URI pattern
50%
100%
AUTH0_AUDIENCE env var
100%
100%
Backend amr claim check
100%
100%
403 mfa_required response
50%
100%
Middleware separation
100%
100%
Threshold-based MFA
100%
100%
Backend-only enforcement
100%
100%
jwks cache/rateLimit
0%
100%
Without context: $0.4867 · 2m 1s · 24 turns · 29 in / 7,324 out tokens
With context: $0.7068 · 2m 24s · 33 turns · 2,212 in / 7,818 out tokens
Adaptive MFA Auth0 Action
api.multifactor.enable usage
100%
100%
MFA already-completed check
0%
50%
Admin role risk signal
100%
100%
Geolocation risk signal
100%
100%
allowRememberBrowser: false for admins
100%
100%
allowRememberBrowser: true for lower-risk
100%
100%
Post-login trigger
100%
100%
Correct event.authentication path
0%
100%
Deploy instructions
100%
100%
No unnecessary early exits
50%
100%
Without context: $0.3305 · 1m 28s · 18 turns · 25 in / 4,685 out tokens
With context: $0.4537 · 1m 33s · 23 turns · 2,203 in / 4,481 out tokens
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.