OAuth Security Testing

by SnailSploit

OAuth Security Testing is a Quality skill for Claude Code, published by SnailSploit in Claude-Red.

2.9K stars479 forkson SnailSploit/Claude-RedAdded 2026/08/17+1% in starsRepository updated 2026/05/08

View source on GitHub Download repo ZIP

claude-aiclaude-ptclaude-skillsredteamredteam-toolsskills

Install in seconds

Install OAuth Security Testing

Copy OAuth Security Testing into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/SnailSploit/Claude-Red/tree/main/Skills/auth/offensive-oauth ~/.claude/skills/offensive-oauth

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/SnailSploit/Claude-Red.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: Skills/auth/offensive-oauth/SKILL.md in SnailSploit/Claude-Red
Installs to: ~/.claude/skills/offensive-oauth
Collection: One of 25 skills cataloged from this repository
Category: Quality — 1354 skills

What OAuth Security Testing does

OAuth Security Testing applies an OAuth 2.0 attack checklist covering redirect_uri bypass, state parameter abuse, PKCE bypass, token leakage, and scope escalation when testing web apps or bug bounty.

OAuth Security Testing is cataloged under Quality on DirSkills. OAuth Security Testing comes from a repository tagged claude-ai, claude-pt, claude-skills, redteam and redteam-tools.

Documentation

README

Excerpt

SKILL: OAuth Security Testing

Metadata

Skill Name: oauth-attacks
Folder: offensive-oauth
Source: https://github.com/SnailSploit/offensive-checklist/blob/main/oauth.md

OAuth 2.0 attack checklist: authorization code interception, redirect_uri bypass, CSRF on OAuth flow, state parameter abuse, open redirector chaining, token leakage via Referer, PKCE bypass, and scope escalation. Use when testing OAuth implementations in web apps or bug bounty.

Trigger Phrases

Use this skill when the conversation involves any of: OAuth, OAuth 2.0, authorization code, redirect_uri bypass, OAuth CSRF, state parameter, PKCE bypass, scope escalation, token leakage, open redirector, OAuth attack

Instructions for Claude

This is the opening of the README. Read the full README on GitHub.

Commands OAuth Security Testing provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

/authorization
/callback
/par

Frequently asked about OAuth Security Testing

What else does SnailSploit publish alongside OAuth Security Testing?
OAuth Security Testing is one of 25 skills that DirSkills catalogs from SnailSploit/Claude-Red, the repository it ships in. Its siblings there include AI Pentest, Advanced Red Team Ops and Basic Exploitation. Each one is a separate skill with its own page in this directory, installs the same way OAuth Security Testing does, and is maintained by SnailSploit in that same repository. The rest of the collection is listed on the SnailSploit/Claude-Red page.
How does OAuth Security Testing compare to other Quality skills?
OAuth Security Testing ranks #461 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of OAuth Security Testing against them. Open each page to compare what they document and how they install.