Probe OAuth2/OIDC flows for PKCE bypass and token handling misconfigurations.
npx skills add https://github.com/xalgord/xalgorix --skill oauth2-oidc
Please help me install this Agent Skill. Skill: oauth2-oidc Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/protocols/oauth2-oidc Command: npx skills add https://github.com/xalgord/xalgorix --skill oauth2-oidc
This Skill helps security teams validate OAuth 2.0 and OpenID Connect implementations by uncovering PKCE bypasses, token exchange abuse, and cross-client attack vectors.
Execute the oauth2-oidc skill against your OAuth2/OIDC provider to discover PKCE weaknesses and token handling vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To test OAuth2 and OIDC flows for PKCE bypass vulnerabilities, execute automated probe sequences against your authorization server to identify code exchange weaknesses, downgrade attacks, and token handling misconfigurations.
Cross-client token abuse in OpenID Connect occurs when tokens are improperly validated across clients. This Skill evaluates authorization servers to uncover token exchange abuse and cross-client attack vectors using standardized vulnerability checks.
Yes, you can assess device authorization flow and token introspection security by running defined probe sequences against your OAuth 2.0 provider to validate defenses and detect misconfigurations in a production-like environment.
The best way to automate vulnerability assessment for an OAuth 2.0 authorization server is to execute standardized probe sequences covering authorization code, PKCE, and device flows to safely evaluate and report findings.
Limitations when testing OAuth2 token reuse and downgrade attacks include relying on safe evaluation using defined probe sequences, meaning tests must target production-like environments rather than live systems to avoid disrupting active client sessions.
kagentiAutomate confidential OAuth2 client creation in Keycloak for server-to-server authentication.
asdfgh1445Analyze Cross-site Scripting vulnerabilities, attack vectors, and bypass techniques.
AcczdyDetect OAuth 2.0 and OpenID Connect implementation flaws during security assessments.
lookatitudeAudit authentication flows and generate an auth-review.md threat map.
