Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/smicolon/ai-kit/auth-provider-addgit clone --depth 1 https://github.com/smicolon/ai-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/smicolon/ai-kit/auth-provider-add)<a href="https://agentmods.dev/commands/smicolon/ai-kit/auth-provider-add"><img src="https://agentmods.dev/badge/commands/smicolon/ai-kit/auth-provider-add.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00012 | $0.01879 |
| Opus 5 | $0.00006 | $0.00940 |
| Sonnet 5 | $0.00002 | $0.00376 |
| Haiku 4.5 | $0.00001 | $0.00188 |
Grade A, and why
auth-provider-add scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 266 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Add Authentication Provider
Add a new social/OAuth provider to your Better Auth configuration.
Supported Providers
- google - Google OAuth 2.0
- github - GitHub OAuth
- discord - Discord OAuth
- apple - Apple Sign In
- microsoft - Microsoft Identity
- twitter - Twitter/X OAuth 2.0
- facebook - Facebook Login
- linkedin - LinkedIn OAuth
- gitlab - GitLab OAuth
- slack - Slack OAuth
Instructions
-
Get Provider Credentials:
Google:
- Go to Google Cloud Console
- Create OAuth 2.0 credentials
- Add authorized redirect URI:
{YOUR_API_URL}/api/auth/callback/google
GitHub:
- Go to GitHub Developer Settings
- Create new OAuth App
- Set callback URL:
{YOUR_API_URL}/api/auth/callback/github
Discord:
- Go to Discord Developer Portal
- Create application, get OAuth2 credentials
- Add redirect:
{YOUR_API_URL}/api/auth/callback/discord
Apple:
- Go to Apple Developer
- Create Service ID with Sign In with Apple capability
- Configure return URL:
{YOUR_API_URL}/api/auth/callback/apple
Microsoft:
- Go to Azure Portal
- Register application in Azure AD
- Add redirect URI:
{YOUR_API_URL}/api/auth/callback/microsoft
-
Add Environment Variables to
.env:# Google GOOGLE_CLIENT_ID=your-client-id GOOGLE_CLIENT_SECRET=your-client-secret # GitHub GITHUB_CLIENT_ID=your-client-id GITHUB_CLIENT_SECRET=your-client-secret # Discord DISCORD_CLIENT_ID=your-client-id DISCORD_CLIENT_SECRET=your-client-secret # Apple APPLE_CLIENT_ID=your-service-id APPLE_CLIENT_SECRET=your-client-secret APPLE_TEAM_ID=your-team-id APPLE_KEY_ID=your-key-id # Microsoft MICROSOFT_CLIENT_ID=your-client-id MICROSOFT_CLIENT_SECRET=your-client-secret MICROSOFT_TENANT_ID=your-tenant-id
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 266 lines · 12 tokens per session scan A 4c6045ec7ebf
auth-provider-add is a command published in the GitHub repository smicolon/ai-kit (6 stars, last pushed 2d ago), licensed MIT. It adds 12 tokens to every session and 1,879 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
security-review
CWE 기반 보안 검토 + STRIDE 위협 모델링 (v6 - effort:max 강제).
version
Display current guide and Claude Code versions.
diff-docs
Compare official Anthropic docs baseline vs current snapshot (no network — instant).
catchup
This command was migrated to a skill in Claude Code 2.1.3. See: examples/skills/catchup/SKILL.md.
plan-start
This command was migrated to a skill in Claude Code 2.1.3. See: examples/skills/plan-pipeline/start/SKILL.md.
security
This command was migrated to a skill in Claude Code 2.1.3. See: examples/skills/security/SKILL.md.