secure-oauth-oidc
Design, implement, audit, test, troubleshoot, or migrate secure OAuth 2.0 and OpenID Connect (OIDC) systems using RFC 9700 / BCP 240.
Skill by conjurer-rich
Chalk Labs
Need help deploying secure-oauth-oidc?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/conjurer-rich-secure-oauth-oidc
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: design, testing, security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/secure-oauth-oidc
What's inside
- Skill name
secure-oauth-oidc- Description
- Design, implement, audit, test, troubleshoot, or migrate secure OAuth 2.0 and OpenID Connect (OIDC) systems using RFC 9700 / BCP 240. Use for authorization servers and OpenID Providers, OAuth clients and OIDC relying parties, resource servers, native apps, browser-based apps, multi-issuer login, redirect URIs, authorization code and PKCE flows, state and nonce handling, ID Token validation, token storage and replay, refresh-token rotation, sender-constrained tokens (DPoP or mTLS), mix-up and injection attacks, discovery and metadata, reverse proxies, or migration away from implicit and resource-owner-password grants.
- License
- NOASSERTION
- Instructions
- 161 lines in SKILL.md · view on GitHub
Files (7)
- SKILL.md
- openai.yaml · agents/
- attack-and-test-catalog.md · references/
- oidc-validation.md · references/
- review-and-delivery.md · references/
- rfc9700-control-catalog.md · references/
- standards-map.md · references/
The license isn't open source, so the instructions aren't shown here. Read SKILL.md on GitHub
More from conjurer-rich/skills
- 0.587score
render-code-shape
conjurer-rich
Render the shape of code — module boundaries, the types that cross them, signatures, and a cited call graph — for code that already exists or a change about…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
bff-entry-points
conjurer-rich
Design and protect browser-facing BFF and backend HTTP entry points: an explicit public/protected access classification for every production route, a…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
evaluate-existing-solutions
conjurer-rich
Research and compare established libraries, open-source tools and applications, managed services, and standard, framework, or platform primitives against an…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
codebase-design
conjurer-rich
Design and evaluate deep modules: cohesive responsibility behind a small, stable caller-facing contract, with information hiding, justified seams, explicit…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
graph-engineering
conjurer-rich
Compose installed agent skills into one orchestrated multi-agent run: an agent graph where each node is a sub-agent that loads exactly one skill, edges carry…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
structure-codebase
conjurer-rich
Design, audit, and evolve physical source and package structures that expose real architectural boundaries while keeping related behavior together.
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
improve-codebase-architecture
conjurer-rich
Audit an existing repository or multi-module subsystem for evidence-backed architecture improvements, rank bounded candidates, and present them in a visual…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
bff-design
conjurer-rich
Decide whether a system needs a backend-for-frontend, how many, and what each one may own: adoption signals and honest costs, one-experience-one-BFF…
SkillAFreshness: A★ 1Claude Code +9 - 0.582score
production-parity-skill-builder
conjurer-rich
Create an application-specific production parity skill by inspecting an app's docs, source, tests, CI, deployment, infrastructure, config, auth, and…
SkillAFreshness: A★ 1Claude Code +9 - 0.582score
api-design
conjurer-rich
Stable consumer-facing API and interface design patterns.
SkillAFreshness: A★ 1Claude Code +9 - 0.582score
observability
conjurer-rich
Observability as an engineering discipline — wide events / canonical log lines, OpenTelemetry instrumentation (traces, metrics, context propagation, sampling…
SkillAFreshness: A★ 1Claude Code +9 - 0.582score
event-sourcing
conjurer-rich
Event sourcing patterns for functional TypeScript — persist state as an append-only log of past events and rebuild it by folding them.
SkillAFreshness: A★ 1Claude Code +9
Signals
- Stars
- 1
- Forks
- 0
- Open issues
- 2
- Last commit (this folder)
- Oct 8, 2026 (23 days ago)
- Last release
- Oct 22, 2026 (9 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- NOASSERTION
- Repository
- github.com/conjurer-rich/skills
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from conjurer-rich
- 0.587score
graph-engineering
conjurer-rich
Compose installed agent skills into one orchestrated multi-agent run: an agent graph where each node is a sub-agent that loads exactly one skill, edges carry…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
codebase-design
conjurer-rich
Design and evaluate deep modules: cohesive responsibility behind a small, stable caller-facing contract, with information hiding, justified seams, explicit…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
structure-codebase
conjurer-rich
Design, audit, and evolve physical source and package structures that expose real architectural boundaries while keeping related behavior together.
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
bff-design
conjurer-rich
Decide whether a system needs a backend-for-frontend, how many, and what each one may own: adoption signals and honest costs, one-experience-one-BFF…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
render-code-shape
conjurer-rich
Render the shape of code — module boundaries, the types that cross them, signatures, and a cited call graph — for code that already exists or a change about…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
bff-entry-points
conjurer-rich
Design and protect browser-facing BFF and backend HTTP entry points: an explicit public/protected access classification for every production route, a…
SkillAFreshness: A★ 1Claude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get secure-oauth-oidc running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
secure-oauth-oidc skill. Agent Mart. https://agentmart.dev/skills/conjurer-rich-secure-oauth-oidc (last updated 2026-10-24)