SKILL: OAuth Security Testing

GitHub

Warning

1,141stars

OAuth 2.0 attack checklist: authorization code interception, redirect_uri bypass, CSRF on OAuth flow, state parameter abuse, open redirector chaining, token leakage via Referer, PKCE bypass, and scope escalation. Use when testing OAuth implementations in web apps or bug bounty.

About

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

Quick Start

# Install the skill

$ osk install github:SnailSploit/Claude-Red/Skills/offensive-oauth

# Use with Claude

$ claude --skill SKILL: OAuth Security Testing

# Use with Codex

$ codex --skill SKILL: OAuth Security Testing

# Use with Cursor

$ cursor --skill SKILL: OAuth Security Testing

S

SnailSploit

View on GitHub

View Source

Repository

SnailSploit/Claude-Red

Stars

1,141

Branch

main

Skill Path

Skills/offensive-oauth/SKILL.md

Also available from

SnailSploit/Claude-Red

7,455

0xwilliamortiz/claude-red

682

Install Command

$ osk install github:SnailSploit/Claude-Red/Skills/offensive-oauth

Security Audit

v1.1.0

Warnings Found

Score: 88/100 · 5/2/2026

Checks (45 rules)

Data Exfiltration

4 passed

Destructive Commands

8 passed

Credential Access

5 passed

Prompt Injection

4 passed

Network Exfiltration

1 issue

Package Mutation

3 passed

Sensitive Paths

5 passed

Obfuscation

5 passed

Privilege Escalation

4 passed

Tool Permissions

4 passed

Findings (2)

Warningnetwork-ip-address

Contains a raw IP address

Infotool-unrestricted

No allowed-tools specified; skill relies on agent defaults (unrestricted tool access)