skills.rest
Acczdy
AcczdyCOMMUNITY
Explore all skills by this author →
GitHub

performing-oauth-scope-minimization-review

Inventory Microsoft Graph OAuth grants and generate a prioritized scope remediation plan.

2|Updated Apr 14, 2026
Search Tags:#oauth#risk-assessment#security-audit#scope-minimization#service-principals#consent-review
One-click install
npx skills add https://github.com/Acczdy/MoZiSec --skill performing-oauth-scope-minimization-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: performing-oauth-scope-minimization-review
Source: https://github.com/Acczdy/MoZiSec/tree/main/iam/.claude/skills/performing-oauth-scope-minimization-review
Command: npx skills add https://github.com/Acczdy/MoZiSec --skill performing-oauth-scope-minimization-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Identifies and reduces over-permissioned OAuth grants across third-party applications by performing a structured OAuth scope minimization review.

Core Features & Use Cases

  • Inventory OAuth grants from Microsoft Graph (service principals and delegated/app permissions)
  • Classify scopes by risk levels (critical/high/medium/low) and assign remediation priorities
  • Detect over-permissioned, unused, or overly broad scopes and generate a prioritized remediation plan
  • Audit token usage to identify stale grants and potential security gaps
  • Provide a reproducible workflow for remediation that can be executed via scripted actions

Quick Start

Provision credentials and run an end-to-end OAuth scope minimization audit to generate a remediation plan.

Frequently Asked Questions about performing-oauth-scope-minimization-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit OAuth scopes and identify over-permissioned grants in Microsoft Graph?▼

To audit OAuth grants, inventory service principals and permission grants from Microsoft Graph, classify scope risk levels, and detect over-permissioned grants to generate a remediation plan.

What is OAuth scope minimization and when do I need a consent review?▼

OAuth scope minimization reduces over-permissioned grants. You need a consent review when auditing third-party risk or excessive API permissions across Microsoft Graph-enabled environments.

Can I detect unused OAuth scopes and stale token grants using this Skill?▼

Yes, this Skill audits token usage and inventories service principals to detect over-permissioned, unused, or overly broad scopes and identify stale grants.

Does this Skill require the requests library for Microsoft Graph API calls?▼

Yes, this Skill requires the requests library to interact with the Microsoft Graph API for inventorying service principals and generating remediation plans.

What is the best way to generate a remediation plan for excessive API permissions?▼

The best way is to classify scope risk levels, detect excessive or unused scopes, audit token usage, and generate a prioritized remediation plan via scripted actions.

What limitations exist when performing tenant-wide OAuth scope audits?▼

This Skill is limited to Microsoft Graph-enabled environments and relies on the requests library to inventory service principals and permission grants for scope risk classification.

Related Skills

Explore More Legal & Compliance Skills→
YukiIto1999YukiIto1999

performing-oauth-scope-minimization-review

Inventory OAuth grants via Microsoft Graph and classify scopes by risk.

Community
Advanced
markus41markus41
12

sharing-auditor

Audit external sharing configurations and permissions across SharePoint Online and OneDrive for Business.

Community
Advanced
YukiIto1999YukiIto1999

detecting-suspicious-oauth-application-consent

Enumerate OAuth2 permission grants in Azure AD via Microsoft Graph API and flag suspicious consent activity.

Community
Advanced
rajyeole6rajyeole6

agency-legal-document-review

Score clause-level risk and compare versions in legal documents.

Community
Advanced