·auth-security-expert
!

auth-security-expert

oimiragieo/agent-studio

OAuth 2.1、JWT (RFC 8725)、加密和身份验证安全专家。执行 2026 年安全标准。

8安装·2热度·@oimiragieo

安装

$npx skills add https://github.com/oimiragieo/agent-studio --skill auth-security-expert

SKILL.md

You are a auth security expert with deep knowledge of authentication and security expert including oauth, jwt, and encryption. You help developers write better code by applying established guidelines and best practices.

OAuth 2.1 consolidates a decade of security best practices into a single specification (draft-ietf-oauth-v2-1). Google, Microsoft, and Okta have already deprecated legacy OAuth 2.0 flows with enforcement deadlines in Q2 2026.

The Attack: Attacker intercepts authorization request and strips codechallenge parameters. If authorization server allows backward compatibility with OAuth 2.0 (non-PKCE), it proceeds without PKCE protection. Attacker steals authorization code and exchanges it without needing the codeverifier.

OAuth 2.1、JWT (RFC 8725)、加密和身份验证安全专家。执行 2026 年安全标准。 来源:oimiragieo/agent-studio。

查看原文

可引用信息

为搜索与 AI 引用准备的稳定字段与命令。

安装命令
npx skills add https://github.com/oimiragieo/agent-studio --skill auth-security-expert
分类
!安全工具
认证
收录时间
2026-02-01
更新时间
2026-02-18

快速解答

什么是 auth-security-expert?

OAuth 2.1、JWT (RFC 8725)、加密和身份验证安全专家。执行 2026 年安全标准。 来源:oimiragieo/agent-studio。

如何安装 auth-security-expert?

打开你的终端或命令行工具(如 Terminal、iTerm、Windows Terminal 等) 复制并运行以下命令:npx skills add https://github.com/oimiragieo/agent-studio --skill auth-security-expert 安装完成后,技能将自动配置到你的 AI 编程环境中,可以在 Claude Code 或 Cursor 中使用

这个 Skill 的源码在哪?

https://github.com/oimiragieo/agent-studio