Oauth skills

Zoom OAuth

anthropics

Streamline authentication for Zoom APIs.

Zoom REST API App

anthropics

Automate Zoom integrations with comprehensive API guidance.

Zoom Apps SDK

anthropics

Build web apps for Zoom meetings and webinars.

Build Zoom Team Chat App

anthropics

Integrate user messaging and chatbots with Zoom.

Hunting SaaS SSO Token Abuse

mukul975

Detect and mitigate token replay attacks in SaaS environments.

Exploiting OAuth Misconfiguration

mukul975

Identify and exploit OAuth misconfigurations effectively.

Zoom Phone Integration

anthropics

Seamlessly integrate Zoom Phone into your applications.

Salesforce OAuth Configuration

forcedotcom

Streamline OAuth app setup in Salesforce.

OAuth with Portless

vercel-labs

Easily configure OAuth for local development environments.

AWS Auth

aws

Streamline user authentication with Amazon Cognito.

MCP OAuth Remote Gateway

nousresearch

Simplify OAuth for remote MCP servers on headless gateways.

Support Slack Setup

posthog

Easily connect Slack to local PostHog Conversations.

A

API Integration Specialist

davila7

Streamline your API integrations with best practices.

Slack Bot Builder

davila7

Create production-ready Slack apps with ease.

XURL

xdevplatform

A CLI tool for authenticated X (Twitter) API requests.

OAuth for Fastify

mcollina

Streamline OAuth 2.0/2.1 integration in Fastify applications.

Adding Inbox Sources

posthog

Integrate new data sources into PostHog's Self-driving Inbox.

MCP Servers

posthog

Manage and connect MCP servers for seamless tool integration.

Detecting Suspicious OAuth Consent

mukul975

Identify risky OAuth application consent grants in Azure AD.

Google Workspace

mitsuhiko

Access Google Workspace APIs with local scripts.

Detect and respond to OAuth token theft and replay in Microsoft Entra ID (Azure AD), covering access token theft, refresh token replay, Primary Refresh Token (PRT) abuse, pass-the-cookie attacks, and Token Protection conditional access policies. Use for impossible-travel or anomalous token-usage alerts, suspected session hijacking, sign-in log analysis, or configuring token-binding defenses in Azure/M365.

Run OAuth 2.0 device-code and illicit-consent phishing attacks against Microsoft Entra ID, using TokenTactics-style tooling to steal access and refresh tokens, bypass MFA, and pivot across Microsoft 365 services. Use for authorized red-team engagements simulating device-code or consent-grant phishing against a tenant you have explicit written permission to test.

Parse Office 365 Unified Audit Logs via Microsoft Graph API to detect email forwarding rule creation, inbox delegation, suspicious OAuth app grants, and other indicators of account compromise.

Salesforce architecture diagrams using Mermaid with ASCII fallback. Use this skill when generating text-based diagrams for Salesforce architecture, OAuth flows, ERDs, integration sequences, or Agentforce structure. TRIGGER when: user says "diagram", "visualize", "ERD", or asks for sequence diagrams, flowcharts, class diagrams, or architecture visualizations in Mermaid. DO NOT TRIGGER when: user asks about non-Salesforce systems.