The Agent Skills Directory

[SAFE]: The skill is designed to guide agents in implementing secure authentication flows. It explicitly enforces 'Hard Rules' that align with security standards like OWASP and RFC 6749.
[COMMAND_EXECUTION]: Includes helper scripts (validate-oauth-scopes.ts and cookie-attribute-checker.ts) designed to be run manually or in CI to audit local code for common auth misconfigurations. These scripts perform deterministic checks on local files and specific URLs provided by the user.
[DATA_EXPOSURE]: The skill provides templates and guides for managing credentials but correctly advises the use of environment variables and secret managers rather than hardcoding values. No credential exposure was found.
[EXTERNAL_DOWNLOADS]: The skill references numerous official documentation sites and well-known technology organizations (Google, OWASP, Mozilla, Vercel, etc.) as authoritative research sources, which is consistent with its purpose.

auth-weapon