← All skills
testing-oauth2-implementation-flaws
95 / 100 · Low risk
Fine to try.
By yanacuti1121/Yana-AI (GitHub) · coding · 11 stars · scanned at commit 4a78f20
'Tests OAuth 2.0 and OpenID Connect implementations for security flaws
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: other-service.example.com
The author does not mention this.
Found in 16 places.
Show 13 more
- .claude/skills/testing-oauth2-implementation-flaws/SKILL.md, line 166
resp = requests.get(auth_endpoint, params=params_no_state, allow_redirects=False) - .claude/skills/testing-oauth2-implementation-flaws/SKILL.md, line 175
resp = requests.get(auth_endpoint, params=params, allow_redirects=False) - .claude/skills/testing-oauth2-implementation-flaws/SKILL.md, line 207
resp = requests.get(auth_endpoint, params=params_no_pkce, allow_redirects=False) - .claude/skills/testing-oauth2-implementation-flaws/SKILL.md, line 213
token_resp = requests.post(token_endpoint, data={ - .claude/skills/testing-oauth2-implementation-flaws/SKILL.md, line 224
token_resp = requests.post(token_endpoint, data={ - .claude/skills/testing-oauth2-implementation-flaws/SKILL.md, line 240
resp = requests.get(auth_endpoint, params=params_plain_pkce, allow_redirects=False) - .claude/skills/testing-oauth2-implementation-flaws/SKILL.md, line 265
resp = requests.get(auth_endpoint, params=params, allow_redirects=False) - .claude/skills/testing-oauth2-implementation-flaws/SKILL.md, line 274
resp = requests.get("https://other-service.example.com/api/resource", - .claude/skills/testing-oauth2-implementation-flaws/SKILL.md, line 282
token_resp = requests.post(token_endpoint, data={ - .claude/skills/testing-oauth2-implementation-flaws/SKILL.md, line 302
resp = requests.get(auth_endpoint, params=implicit_params, allow_redirects=False) - .claude/skills/testing-oauth2-implementation-flaws/SKILL.md, line 319
token_resp = requests.post(token_endpoint, data={ - .claude/skills/testing-oauth2-implementation-flaws/scripts/agent.py, line 41
return requests.get(url, **kwargs, timeout=30) - .claude/skills/testing-oauth2-implementation-flaws/scripts/agent.py, line 50
return requests.post(url, **kwargs, timeout=30)
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'testing-oauth2-implementation-flaws' ] || [ -L ~/.agents/skills/'testing-oauth2-implementation-flaws' ]; then echo 'A skill folder named testing-oauth2-implementation-flaws already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/yanacuti1121/Yana-AI' "$d" && git -C "$d" checkout --quiet '4a78f208d4b8cea9b6e4c33c40ffdb531daa0b7f' -- '.claude/skills/testing-oauth2-implementation-flaws' && mkdir -p ~/.agents/skills && cp -R "$d"/'.claude/skills/testing-oauth2-implementation-flaws' ~/.agents/skills/'testing-oauth2-implementation-flaws' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'testing-oauth2-implementation-flaws' ~/.claude/skills/'testing-oauth2-implementation-flaws' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for yanacuti1121/Yana-AI shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/yanacuti1121/Yana-AI/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 4a78f20 | 95 |
Also found in
Identical copies of this skill exist at:
- yanacuti1121/Yana-AI/core/skills/testing-oauth2-implementation-flaws