identity-federation
Checks login systems for problems that let hackers pretend to be someone else or steal access.
Installation
Paste this into Claude Code, Cursor, or any agent that can run commands.
What this skill does
What it does: - Tests single sign-on systems that let users log in once to access many services - Checks if login tokens can be forged or stolen - Verifies that user information is properly protected during login - Tests if the system correctly checks where users are redirected after login - Analyzes SAML, OIDC, and OAuth login flows for weaknesses When to use it: - You need to test a company's single sign-on system - You want to check if login tokens are properly signed and verified - You need to verify that users cannot access other users' accounts - You are testing a system that uses SAML or OAuth for authentication - You want to check if the login system properly validates where users are sent after logging in
The full skill text could not be loaded right now. It installs fine with the command above, or read it at the source.
Mirrored from the author's public source. Install counts from the open skills registry.