Skills
.Work. You
Rest

security-review-owasp-saml-security

Community

Find SAML flaws before attackers do.

Software Engineering#owasp#security review#saml#idp#replay protection#relaystate#xml signature
Authorsjinks
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill helps reviewers spot SAML authentication weaknesses that can lead to forged logins, replayed assertions, trust confusion, or broken logout handling.

Core Features & Use Cases

  • Checks AuthnRequest, Response, and Assertion processing for signature-wrapping and protocol-completeness issues.
  • Reviews certificate trust, RelayState handling, replay defenses, and IdP-initiated SSO behavior.
  • Use it when auditing a SAML login flow, validating an SP integration, or assessing XML signature and metadata handling in a security review.

Quick Start

Ask the assistant to review the SAML login flow in your codebase for signature validation, replay protection, RelayState safety, and certificate trust issues using this skill.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: security-review-owasp-saml-security
Download link: https://github.com/sjinks/ai-owasp-skillset/archive/main.zip#security-review-owasp-saml-security

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 537,000+ vetted skills library on demand.