scope-claims-reviewer

Audit OpenID Connect scope and claims test cases for correctness and completeness.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/maronnjapan/maronn-openid-provider --skill scope-claims-reviewer
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: scope-claims-reviewer
Source: https://github.com/maronnjapan/maronn-openid-provider/tree/main/.claude/skills/scope-claims-reviewer
Command: npx skills add https://github.com/maronnjapan/maronn-openid-provider --skill scope-claims-reviewer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit OpenID Connect scope and claims test cases for correctness and completeness.

Core Features & Use Cases

  • Systematic review of OpenID Core scope and claims test suites.
  • Verification of required scopes (openid) and standard scopes (profile, email, address, phone) mappings to claims.
  • Gap analysis and remediation guidance for conformance with OIDC Core 3.1.2.1 and sections 5.4, 5.5.

Quick Start

Review the provided test-case documentation and update the review checklist to reflect any gaps found.

Frequently Asked Questions about scope-claims-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review OpenID Connect scope and claims test cases for conformance?

OpenID Connect scope and claims tests check that an OpenID Provider correctly maps standard scopes like profile and email to their respective claims, and properly handles the required openid scope per OIDC Core specifications.

What is included in an OpenID Connect scope and claims gap analysis?

An OpenID Connect scope and claims gap analysis includes verifying required scopes, checking standard scope to claims mappings, and identifying missing error handling per OIDC Core sections 5.4 and 5.5.

How do I validate standard scope to claims mapping in OIDC test suites?

Validate standard scope to claims mapping by systematically reviewing test cases to ensure scopes like profile, email, address, and phone correctly return their designated claims per the OpenID Core specification.

Does this conformance review cover error handling for OpenID Connect scope requests?

Yes, the conformance review validates error handling for OpenID Connect scope requests, checking that test cases verify error responses per OIDC Core specifications for invalid or unsupported scope combinations.