← All skills
okta-attack
90 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By sickn33/agentic-awesome-skills (GitHub) · coding · 49,524 stars · scanned at commit 00f9c40
Okta-as-IdP red-team attack chain
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 12 places.
Show 9 more
Sends data to these websites: $host, app.target.com, example.com&login_hint=
The author does not mention this.
Found in 15 places.
Show 12 more
- skills/okta-attack/SKILL.md, line 110
curl -sS --max-time 10 "https://<tenant>.okta.com/api/v1/sessions/me" \ - skills/okta-attack/SKILL.md, line 127
curl -sS --max-time 10I "https://<tenant>.okta.com/oauth2/v1/authorize?client_id=<id>&response_type=code&scope=openid&redirect_uri=https://example.com&login_hin - skills/okta-attack/SKILL.md, line 137
curl -sS --max-time 10 -X POST "https://<tenant>.okta.com/api/v1/authn" \ - skills/okta-attack/SKILL.md, line 209
curl -sS --max-time 10 -X POST "https://<tenant>.okta.com/api/v1/authn/factors/<factor_id>/verify" \ - skills/okta-attack/SKILL.md, line 224
curl -sS --max-time 10 "https://<tenant>.okta.com/.well-known/openid-configuration" | python3 -m json.tool - skills/okta-attack/SKILL.md, line 235
code=$(curl -sS --max-time 10 -o /dev/null -w "%{http_code}" \ - skills/okta-attack/SKILL.md, line 250
curl -sS --max-time 10 "https://<tenant>.okta.com/app/<app_id>/sso/saml/metadata" - skills/okta-attack/SKILL.md, line 266
curl -sS --max-time 10 -X POST "https://<tenant>.okta.com/api/v1/authn" \ - skills/okta-attack/SKILL.md, line 273
curl -sS --max-time 10 -H "Authorization: SSWS <token>" "https://<tenant>.okta.com/api/v1/users" - skills/okta-attack/SKILL.md, line 274
curl -sS --max-time 10 -H "Authorization: SSWS <token>" "https://<tenant>.okta.com/api/v1/groups" - skills/okta-attack/SKILL.md, line 275
curl -sS --max-time 10 -H "Authorization: SSWS <token>" "https://<tenant>.okta.com/api/v1/apps" - skills/okta-attack/SKILL.md, line 276
curl -sS --max-time 10 -H "Authorization: SSWS <token>" "https://<tenant>.okta.com/api/v1/logs" # audit log
Other copies in this repository
sickn33/agentic-awesome-skills has 2 more folders with a skill named okta-attack. This page shows the lowest-scoring copy.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'okta-attack' ] || [ -L ~/.agents/skills/'okta-attack' ]; then echo 'A skill folder named okta-attack already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/sickn33/agentic-awesome-skills' "$d" && git -C "$d" checkout --quiet '00f9c4077878be6ffcc093c099f05a6cccaf1b95' -- 'skills/okta-attack' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/okta-attack' ~/.agents/skills/'okta-attack' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'okta-attack' ~/.claude/skills/'okta-attack' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for sickn33/agentic-awesome-skills shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/sickn33/agentic-awesome-skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-11 | 00f9c40 | 90 |
| 2026-11-08 | 828257c | 90 |
| 2026-11-07 | 828257c | 90 |