Best agent skills for authentication and identity
We found 230 agent skills for authentication and identity in the catalog; these are the 15 that rank highest. The order comes from our rank, which weighs adoption, freshness, documentation and publisher identity. Nobody can pay for a place on this list. aws-iam, cloud-attack-methods and web-attack-methods lead it. aiml-access-diagnostics and bedrock-adoption-readiness are published by the company that makes them. aws-iam comes from the largest repository here (48,428 stars). 11 of the 15 had activity in the last 30 days. Each entry lists why it made the list and links to its install page.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
Top 15 of 230
- 1aws-iam
devops-skills
Manage IAM users, roles, and policies.
- Largest repository here (48,428 stars)
- Active in the last 30 days
- Open source (MIT)
★ 48.4KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 2cloud-attack-methods
AIPentest
云攻击:元数据API,S3/K8s,AWS/Azure/GCP身份提权,MinIO矩阵,阿里云FC,ChengZi SDK解密。Use when attacking cloud metadata, IAM, K8s, MinIO, Aliyun FC, or cloud post-ex.
- Repository has 8K stars
- Active in the last 30 days
- Open source (Apache-2.0)
★ 8KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 3web-attack-methods
AIPentest
Web全栈攻击:SQLi/命令注入/SSTI/XSS/SSRF/NoSQL,认证JWT/OAuth/SAML,LFI/上传,Tomcat/WS/STOMP/XFF/PATH_INFO/CDN502/网宿JS挑战绕过。Use when testing Web injection, auth bypass…
- Repository has 8K stars
- Active in the last 30 days
- Open source (Apache-2.0)
★ 8KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 4
Configuring Cognito Federation for Webiny projects — federated sign-in via external identity providers (Google, Facebook, Apple, Amazon, OIDC/Entra ID) while…
- Repository has 8K stars
- Active in the last 30 days
★ 8KLast active Oct 20, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 5webiny-configure-auth0
webiny
Configuring Auth0 as an identity provider (IDP) for Webiny projects.
- Repository has 8K stars
- Active in the last 30 days
★ 8KLast active Oct 20, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 6svc-mobile-android
s0ld13rr
Android APK static analysis — OWASP Mobile Top 10, Retrofit API audit, transport security, smali reading, component export, auth flow analysis.
- Active in the last 30 days
- Open source (MIT)
★ 883Last active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 7svc-docker-k8s
s0ld13rr
Docker/Kubernetes attack techniques — exposed API abuse, container escape, RBAC/privileged-pod issues, secret theft.
- Active in the last 30 days
- Open source (MIT)
★ 883Last active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 8aiml-access-diagnostics
tamrishOfficial
Use this skill when diagnosing IAM and access failures for Bedrock and SageMaker.
- Published by the vendor
- Active in the last 30 days
- Open source (Apache-2.0)
★ 116Last active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 9bedrock-adoption-readiness
sruvedOfficial
Amazon Bedrock production readiness assessment covering IAM governance, data retention (ZDR), quota and capacity headroom, and operational observability…
- Published by the vendor
- Active in the last 30 days
- Open source (Apache-2.0)
★ 116Last active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 10hunt-auth
Encod3d-Sec
Auth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth…
- Open source (MIT)
★ 335Last active Aug 19, 2026Claude Code, Claude apps, Codex, Cursor +6
BFreshness: B–Security: not graded yet - 11hunt-cloud
Encod3d-Sec
Cloud attack hunting for AWS / Azure / GCP - credential discovery, metadata SSRF, IAM privesc, service enumeration, persistence.
- Open source (MIT)
★ 335Last active Jul 28, 2026Claude Code, Claude apps, Codex, Cursor +6
BFreshness: B–Security: not graded yet - 12organization-best-practices
better-auth
Configure multi-tenant organizations, manage members and invitations, define custom roles and permissions, set up teams, and implement RBAC using Better…
★ 225Last active Sep 1, 2026Claude Code, Claude apps, Codex, Cursor +6
BFreshness: B–Security: not graded yet - 13two-factor-authentication-best-practices
better-auth
Configure TOTP authenticator apps, send OTP codes via email/SMS, manage backup codes, handle trusted devices, and implement 2FA sign-in flows using Better…
★ 225Last active Sep 1, 2026Claude Code, Claude apps, Codex, Cursor +6
BFreshness: B–Security: not graded yet - 14oauth-oidc-misconfiguration
langbyyi
OAuth and OIDC misconfiguration testing playbook.
- Active in the last 30 days
- Open source (Apache-2.0)
★ 131Last active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 15saml-sso-assertion-attacks
langbyyi
SAML SSO assertion attacks.
- Active in the last 30 days
- Open source (Apache-2.0)
★ 131Last active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet
Related
- AlternativesAlternatives to aws-iam
- AlternativesAlternatives to cloud-attack-methods
- AlternativesAlternatives to web-attack-methods
- AlternativesAlternatives to webiny-cognito-federation
- AlternativesAlternatives to webiny-configure-auth0
- Host guideAgent skills for Gemini CLI
- Host guideAgent skills for Cursor
- Host guideAgent skills for Claude Code