← 返回 Skills 市场
Oauth Oidc
作者
codenova58
· GitHub ↗
· v1.0.0
· MIT-0
151
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install oauth-oidc
功能描述
Deep OAuth 2.0 / OpenID Connect workflow—choosing flows for client type, PKCE, tokens and validation, scopes and consent, rotation, and common misconfigurati...
安全使用建议
This skill is instruction-only and internally consistent with its stated purpose—no code, no installs, and no credentials are requested. You can install it without exposing secrets, but remember: (1) it only provides guidance and won't perform actions for you; (2) verify any later updates that add install scripts, environment variables, or network calls before granting extra privileges; and (3) if you want to be extra cautious, disable autonomous invocation so the agent only runs the skill when you explicitly call it.
功能分析
Type: OpenClaw Skill
Name: oauth-oidc
Version: 1.0.0
The skill bundle provides architectural guidance and best practices for implementing OAuth 2.0 and OpenID Connect (OIDC). The instructions in SKILL.md focus on security-positive behaviors such as using PKCE, validating tokens (issuer, audience, signature), and enforcing least privilege scopes, with no evidence of malicious intent or risky execution logic.
能力评估
Purpose & Capability
Name and description match the SKILL.md content. The guidance is about choosing flows, PKCE, tokens, scopes, logout and hardening; nothing in the package asks for unrelated access or credentials.
Instruction Scope
SKILL.md contains prescriptive design and implementation guidance only. It does not instruct the agent to read files, access env vars, call external endpoints, or exfiltrate data; scope is limited to documentation and recommendations.
Install Mechanism
No install spec and no code files are present (instruction-only). That minimizes disk/network risk; nothing will be downloaded or written by the skill itself.
Credentials
The skill declares no required environment variables, credentials, or config paths, which is appropriate for a documentation/consulting skill.
Persistence & Privilege
always is false and there is no other persistence or privileged configuration. The skill permits normal autonomous invocation (disable-model-invocation is false), which is standard for skills and not problematic here because no sensitive access is requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install oauth-oidc - 安装完成后，直接呼叫该 Skill 的名称或使用
/oauth-oidc触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of the oauth-oidc skill.
- Provides a comprehensive, step-by-step OAuth 2.0 and OpenID Connect workflow for implementing SSO, social login, or API access.
- Covers client classification, flow selection with PKCE, token validation, scopes/consent, session management, and operational security.
- Highlights common misconfigurations and best practices for secure setup.
- Includes checklists, tips, and guidelines for both web and mobile applications.
元数据
常见问题
Oauth Oidc 是什么？
Deep OAuth 2.0 / OpenID Connect workflow—choosing flows for client type, PKCE, tokens and validation, scopes and consent, rotation, and common misconfigurati... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 151 次。
如何安装 Oauth Oidc？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install oauth-oidc」即可一键安装，无需额外配置。
Oauth Oidc 是免费的吗？
是的，Oauth Oidc 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Oauth Oidc 支持哪些平台？
Oauth Oidc 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Oauth Oidc？
由 codenova58（@codenova58）开发并维护，当前版本 v1.0.0。
推荐 Skills