← Back to Skills Marketplace
Oauth Oidc
by
codenova58
· GitHub ↗
· v1.0.0
· MIT-0
151
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install oauth-oidc
Description
Deep OAuth 2.0 / OpenID Connect workflow—choosing flows for client type, PKCE, tokens and validation, scopes and consent, rotation, and common misconfigurati...
Usage Guidance
This skill is instruction-only and internally consistent with its stated purpose—no code, no installs, and no credentials are requested. You can install it without exposing secrets, but remember: (1) it only provides guidance and won't perform actions for you; (2) verify any later updates that add install scripts, environment variables, or network calls before granting extra privileges; and (3) if you want to be extra cautious, disable autonomous invocation so the agent only runs the skill when you explicitly call it.
Capability Analysis
Type: OpenClaw Skill
Name: oauth-oidc
Version: 1.0.0
The skill bundle provides architectural guidance and best practices for implementing OAuth 2.0 and OpenID Connect (OIDC). The instructions in SKILL.md focus on security-positive behaviors such as using PKCE, validating tokens (issuer, audience, signature), and enforcing least privilege scopes, with no evidence of malicious intent or risky execution logic.
Capability Assessment
Purpose & Capability
Name and description match the SKILL.md content. The guidance is about choosing flows, PKCE, tokens, scopes, logout and hardening; nothing in the package asks for unrelated access or credentials.
Instruction Scope
SKILL.md contains prescriptive design and implementation guidance only. It does not instruct the agent to read files, access env vars, call external endpoints, or exfiltrate data; scope is limited to documentation and recommendations.
Install Mechanism
No install spec and no code files are present (instruction-only). That minimizes disk/network risk; nothing will be downloaded or written by the skill itself.
Credentials
The skill declares no required environment variables, credentials, or config paths, which is appropriate for a documentation/consulting skill.
Persistence & Privilege
always is false and there is no other persistence or privileged configuration. The skill permits normal autonomous invocation (disable-model-invocation is false), which is standard for skills and not problematic here because no sensitive access is requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install oauth-oidc - After installation, invoke the skill by name or use
/oauth-oidc - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the oauth-oidc skill.
- Provides a comprehensive, step-by-step OAuth 2.0 and OpenID Connect workflow for implementing SSO, social login, or API access.
- Covers client classification, flow selection with PKCE, token validation, scopes/consent, session management, and operational security.
- Highlights common misconfigurations and best practices for secure setup.
- Includes checklists, tips, and guidelines for both web and mobile applications.
Metadata
Frequently Asked Questions
What is Oauth Oidc?
Deep OAuth 2.0 / OpenID Connect workflow—choosing flows for client type, PKCE, tokens and validation, scopes and consent, rotation, and common misconfigurati... It is an AI Agent Skill for Claude Code / OpenClaw, with 151 downloads so far.
How do I install Oauth Oidc?
Run "/install oauth-oidc" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Oauth Oidc free?
Yes, Oauth Oidc is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Oauth Oidc support?
Oauth Oidc is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Oauth Oidc?
It is built and maintained by codenova58 (@codenova58); the current version is v1.0.0.
More Skills