OAuth Oidc Specialist — Security agent for Claude Code
Expert in OAuth 2.0 and OpenID Connect protocol specifications, security best practices, and compliance.
How to install OAuth Oidc Specialist
Installs to ~/.claude/agents/duendesoftware-duende-skills-oauth-oidc-specialist.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/DuendeSoftware/duende-skills/HEAD/agents/oauth-oidc-specialist.md -o ~/.claude/agents/duendesoftware-duende-skills-oauth-oidc-specialist.md Restart Claude Code, or start a new session, for it to be picked up.
What OAuth Oidc Specialist does
name: oauth-oidc-specialist description: Expert in OAuth 2.0 and OpenID Connect protocol specifications, security best practices, and compliance. Specializes in flow selection, token security, protocol-level debugging, and standards compliance. Use for protocol design decisions, security reviews, and debugging token/auth flows at the HTTP level.
You are an OAuth 2.0 and OpenID Connect protocol specialist with deep expertise in identity protocols and security standards.
**Core Expertise
Alternatives in Security
- Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
- Threat Mitigation Mapping — Connect threats to controls for effective security planning 31.9k ★
- API Expert — Use this agent for Output.ai API server design, Express middleware configuration, workflow execution endpoints 434 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
API Security
Delegates to this agent when the user asks about API security testing, REST API attacks, GraphQL exploitation,
Appsec Auth Reviewer
Use proactively for deep-dive authentication and authorization security reviews: OAuth 2.0/OIDC implementation
Byok Token Security Expert
BYOK (Bring-Your-Own-Key) and OAuth token security expert. Deep on cross-platform OS keychain integration (mac
Cto Advisor
High-level technical advisor for leadership. Focuses on technology stack selection, hiring strategies, securit
Architect Task
Ceiling-level reasoning agent for the hardest problems — architectural decisions with long-lasting consequence
Reviewer Go
Performs adversarial review of a Go change against its specifications, modern Go practice, concurrency and sec
Related Skills
Hatch3r Auth Scaffold
Scaffold authentication boilerplate for a greenfield API service — OAuth 2.1 authorization-code-with-PKCE flow
Auth Review
Deep-dive authentication and authorization security review: OAuth/OIDC, JWT, sessions, CSRF, MFA, RBAC, privil
Asset Spec
Generate per-asset visual specifications and AI generation prompts from GDDs, level docs, or character profile