session-management

Implements secure session management with JWT tokens, Redis storage, refresh flows, and proper cookie configuration. Use when building authentication systems, managing user sessions, or implementing secure logout functionality.

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

80%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

Concise, well-structured, and actionable code examples that assume Claude's competence. The main gap is the absence of a sequenced workflow with validation checkpoints for security-critical operations.

Suggestions

Add an ordered workflow with explicit validation checkpoints (e.g., verify signature -> on failure reject -> rotate tokens) to raise workflow_clarity above the destructive/batch cap of 3.

Define or inline the undefined identifiers (cookieOptions, User model) so the refresh example is fully self-contained.

Include a brief verification step for session invalidation to confirm logout succeeded.

Dimension	Reasoning	Score
Conciseness	Lean and efficient: four terse code blocks with one-line section intros and no padding or over-explanation of JWT/Redis basics; every token earns its place.	5 / 5
Actionability	Provides fully executable, copy-paste-ready JavaScript covering the common cases; a few identifiers (cookieOptions, User) are referenced but not defined inline, keeping it short of 5.	4 / 5
Workflow Clarity	Content is presented as parallel labeled snippets with no sequenced flow or explicit validation checkpoints; for destructive/batch-adjacent security operations (token issuance, session invalidation) the missing validation loops cap this at 3.	3 / 5
Progressive Disclosure	Well-organized into clearly headed sections with no nested references; for a focused single-file skill nothing belongs in a separate file, so navigation is trivial.	5 / 5
	Total	17 / 20 Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that covers concrete capabilities and provides explicit 'Use when' trigger guidance. Minor room to add user-facing synonyms and tighten the action verbs.

Suggestions

Add common synonyms like 'login', 'JWT', or 'sign out' to broaden natural keyword coverage in trigger_term_quality.

Reframe capabilities as verbs (e.g., 'Issue and validate JWT tokens', 'Store sessions in Redis') to push specificity toward 5.

Dimension	Reasoning	Score
Specificity	Names four concrete capabilities ('JWT tokens, Redis storage, refresh flows, and proper cookie configuration'), giving comprehensive coverage of the session-management surface; short of 5 because the actions are framed as objects rather than explicit verbs.	4 / 5
Completeness	Explicitly answers both what (secure session management with JWT/Redis/refresh/cookies) and when ('Use when building authentication systems, managing user sessions, or implementing secure logout functionality') with concrete trigger phrases.	5 / 5
Trigger Term Quality	Includes natural user phrasings ('building authentication systems', 'managing user sessions', 'secure logout'); a few common synonyms like 'login', 'JWT', or 'sign out' are missing.	4 / 5
Distinctiveness Conflict Risk	The JWT/Redis/refresh/cookie niche is fairly specific with low overlap risk; not 5 because 'authentication systems' is broad enough to potentially overlap with general auth skills.	4 / 5
	Total	17 / 20 Passed

Validation

100%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository: secondsky/claude-skills
Path: plugins/session-management/skills/session-management/SKILL.md
Commit: ad16332

Reviewed: 12 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.