← All skills

testing-oauth2-implementation-flaws

95 / 100 · Low risk

Fine to try.

By plurigrid/asi (GitHub) · coding · 72 stars · scanned at commit 293ce9f

Tests OAuth 2.0 and OpenID Connect implementations for security flaws including authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, scope escalation, and PKCE bypass. The tester evaluates the authorization server, client application, and token handling for common misconfigurations that enable account takeover or unauthorized access. Activates for requests involving OAuth security testing, OIDC vulnerability assessment, OAuth2 redirect bypass, or autho…

Works with any agent that supports SKILL.md skills.

What this skill can do

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'testing-oauth2-implementation-flaws' ] || [ -L ~/.agents/skills/'testing-oauth2-implementation-flaws' ]; then echo 'A skill folder named testing-oauth2-implementation-flaws already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/plurigrid/asi' "$d" && git -C "$d" checkout --quiet '293ce9f76e3abcd5ba18db284688bc0d9ac6691d' -- 'plugins/asi/skills/testing-oauth2-implementation-flaws' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/asi/skills/testing-oauth2-implementation-flaws' ~/.agents/skills/'testing-oauth2-implementation-flaws' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'testing-oauth2-implementation-flaws' ~/.claude/skills/'testing-oauth2-implementation-flaws' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for plurigrid/asi shows the score of its lowest-scoring skill.

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/plurigrid/asi.svg)](https://zalavijaysinh.github.io/skilltrust/repos/plurigrid/asi/)

Score history