Skip to content
Get packs

Guide · Agent skill

How to use the Accessible Authentication Review agent skill

Updated · written with AI from the project's own documentation and checked against our catalogue data

The Accessible Authentication Review skill (accessible-authentication) teaches an AI agent to review sign-in, sign-up, two-factor, CAPTCHA and account recovery screens for accessibility problems. It looks at the whole sign-in path, not only the password field. After this guide you will know what the skill does, how to install it, how to ask for a review in plain language, and what to check in its output.

Accessible Authentication Reviewthedaviddias/Front-End-Checklist · MIT

Quick start

  1. 1Download the ZIP. Get the accessible-authentication ZIP from this page.
  2. 2Unzip into a skills folder. Extract it into ~/.claude/skills/ for personal use, or into a project's .claude/skills/ folder.
  3. 3Or upload in the Claude apps. In the Claude apps, go to Settings → Capabilities → Skills and upload the skill.
  4. 4Describe the flow. Ask the agent to review a specific login, MFA, CAPTCHA or recovery flow in plain language.
  5. 5Share the markup. Provide the form HTML, field attributes and error messages so the agent can check them.
  6. 6Apply and test the fixes. Work through the suggested fixes and test paste, password managers and OTP autofill yourself.

What is an agent skill and what does this one do?

An agent skill is a folder of instructions that an AI agent loads when a task matches the skill's description. This skill is triggered when you review sign-in, sign-up, MFA, CAPTCHA, recovery or re-authentication flows.

The skill asks the agent to check for steps that force users to memorize or retype information, blocked paste or password managers, poor one-time-code handling, and cognitive tests with no alternative. It then suggests fixes such as passkeys, magic links, device approval and OTP autofill.

  • Do not block paste or password managers in login and recovery flows.
  • Prefer passkeys, magic links, device approval, or password-manager-friendly flows.
  • Support OTP autofill and paste, for example with autocomplete="one-time-code".
  • Avoid CAPTCHA or secondary checks that require memorizing or transcribing information without an alternative.

Install the skill from the ZIP download

Download the ZIP for accessible-authentication from this page. Unzip it into your personal skills folder at ~/.claude/skills/, or into a project's .claude/skills/ folder if you want the skill available only in that project.

If you use the Claude apps instead, upload the skill under Settings → Capabilities → Skills.

  • Personal install: unzip into ~/.claude/skills/
  • Project install: unzip into the project's .claude/skills/ folder
  • Claude apps: Settings → Capabilities → Skills, then upload

Trigger the skill with natural requests

You do not need a special command. Describe the flow you want reviewed and mention the authentication context, such as login, MFA, password reset or account recovery. The skill's description matches requests about these flows.

Ask for the whole path, not just the main form, because the skill is designed to check error handling and backup methods too.

  • Review our login and password reset flow for accessibility problems.
  • Check this MFA verification screen for paste and OTP autofill barriers.
  • Audit our sign-up form and CAPTCHA step for cognitive-test barriers.
  • Look at the account recovery flow and tell me where users must memorize or retype something.

Review the source files and the code example

The skill's main instructions cover a Quick Reference, a Check step, a Fix step, an Explain step and a Code Review step. The supporting file references/rule.md contains a fuller code example that uses password-manager and OTP-friendly fields, such as autocomplete="username webauthn" on the email field, autocomplete="current-password" on the password field, and a labelled verification code input.

When you share your own markup, the agent can compare it with these patterns and flag fields that block assistive tools.

<label for="otp">Verification code</label> <input id="otp" name="otp" inputmode

What the skill needs and how it runs

The skill lists no required tools or software. It does not run scripts and does not use the network, according to its listing. It works from instructions and the reference file it ships with.

Because the skill only guides review, you still decide what changes to make. Test any fix with real password managers, paste, and OTP autofill on your own devices.

  • Requires: nothing listed
  • Runs scripts: no
  • Uses network: no

Tips for getting useful results

Give the agent the actual markup, field attributes and error messages, not just a screenshot description. The skill's checks depend on specifics such as autocomplete values and whether paste is blocked.

Ask about fallback paths. A flow is only accessible under this skill's guidance if at least one path does not depend on a cognitive function test.

  • Include error messages and recovery screens, not only the happy path.
  • Ask whether each CAPTCHA or knowledge check has a non-cognitive alternative.
  • Use the findings as a checklist and verify them with assistive technology testing.

What people use it for

  • A front-end developer checks a login page for blocked paste and missing autocomplete values.
  • A designer reviews an account recovery flow for steps that require retyping codes.
  • A product team audits sign-up and CAPTCHA steps for users with cognitive or motor needs.
  • A developer reviews MFA screens for poor one-time-code handling.

Frequently asked questions

How do I install the accessible-authentication skill?

Download the ZIP from this page and unzip it into ~/.claude/skills/ for personal use or into a project's .claude/skills/ folder. In the Claude apps, you can instead upload it under Settings → Capabilities → Skills.

Is the accessible-authentication skill free?

The skill is listed under the MIT licence. Check the repository's licence file for the exact terms of use.

What does the skill need to run?

Its listing says it requires nothing, runs no scripts and uses no network. It works from its instructions and the included references/rule.md file.

Does this skill replace a security audit?

No. It focuses on accessibility and only touches security as a secondary concern. Use a dedicated penetration test for security work.

Does the skill give a legal compliance opinion?

No. It gives general guidance from a checklist, not a formal audit or verified legal compliance opinion.

Why is my agent not using the skill?

Check that the folder is in the right place and that your request describes a sign-in, sign-up, MFA, CAPTCHA, recovery or re-authentication flow, since the skill's description is matched against your request.

New agent skills, repos and AI tools — every week

The best new skills and open-source projects, the fastest-growing repos, and one free prompt. Five minutes to read. Unsubscribe anytime.

Our verdict

Use this skill if you build or design login, sign-up, MFA or account recovery screens and want an agent to check them against accessible authentication principles. Pick something else if you need penetration testing or a formal legal compliance audit, because this skill is an accessibility checklist.

Download the skill