The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends cloning the oauthscan repository from GitHub (CompassSecurity/oauthscan). This is a documented security auditing tool provided by a recognized security research organization.
[COMMAND_EXECUTION]: The skill instructions involve using standard command-line utilities such as curl to fetch OIDC metadata, grep to search for hardcoded secrets in local files, and python3 to run the suggested security scanner.
[PROMPT_INJECTION]: The guide includes an example URL containing a homoglyph (tаrget.com with a Cyrillic 'а') to illustrate IDN homograph bypasses in OAuth validation. This is an educational example and does not represent an attempt to obfuscate the skill's instructions.
[DATA_EXFILTRATION]: The skill describes techniques for finding exposed credentials within a target application's codebase. It does not contain any logic to exfiltrate sensitive data from the user's environment to an external location.

oauth-oidc