Skip to content
Agentmart
Submit a tool

Agent skills for authentication and identity in Claude Code

230 agent skills for authentication and identity in the catalog list Claude Code as a supported host. These are the 15 that rank highest, ordered by adoption, freshness and documentation. aws-iam, cloud-attack-methods and web-attack-methods lead the list. Claude Code reads them from .claude/skills/<name>/SKILL.md in the project, or ~/.claude/skills/<name>/ for every project. A skill is a folder with a SKILL.md file; Claude Code loads it when a task matches its description. Every listing links to its source and shows a freshness grade.

Updated Oct 26, 2026 · Built from catalog data; how we rank and grade

How to install in Claude Code

npx skills add <owner>/<repo> --skill <name> -a claude-code

Where it goes: .claude/skills/<name>/SKILL.md in the project, or ~/.claude/skills/<name>/ for every project.

The host's docs describe copying a folder with a SKILL.md into a skills directory; the npx skills command is a third-party shortcut for the same thing.

Each listing page has the exact command for that listing.

Top 15 of 230

  1. 1
    aws-iam

    devops-skills

    Manage IAM users, roles, and policies.

    • Largest repository here (48,428 stars)
    • Active in the last 30 days
    • Open source (MIT)

    ★ 48.4KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6

  2. 2
    cloud-attack-methods

    AIPentest

    云攻击:元数据API,S3/K8s,AWS/Azure/GCP身份提权,MinIO矩阵,阿里云FC,ChengZi SDK解密。Use when attacking cloud metadata, IAM, K8s, MinIO, Aliyun FC, or cloud post-ex.

    • Repository has 8K stars
    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 8KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6

  3. 3
    web-attack-methods

    AIPentest

    Web全栈攻击:SQLi/命令注入/SSTI/XSS/SSRF/NoSQL,认证JWT/OAuth/SAML,LFI/上传,Tomcat/WS/STOMP/XFF/PATH_INFO/CDN502/网宿JS挑战绕过。Use when testing Web injection, auth bypass…

    • Repository has 8K stars
    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 8KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6

  4. 4
    webiny-cognito-federation

    webiny

    Configuring Cognito Federation for Webiny projects — federated sign-in via external identity providers (Google, Facebook, Apple, Amazon, OIDC/Entra ID) while…

    • Repository has 8K stars
    • Active in the last 30 days

    ★ 8KLast active Oct 20, 2026Claude Code, Claude apps, Codex, Cursor +6

  5. 5
    webiny-configure-auth0

    webiny

    Configuring Auth0 as an identity provider (IDP) for Webiny projects.

    • Repository has 8K stars
    • Active in the last 30 days

    ★ 8KLast active Oct 20, 2026Claude Code, Claude apps, Codex, Cursor +6

  6. 6
    svc-mobile-android

    s0ld13rr

    Android APK static analysis — OWASP Mobile Top 10, Retrofit API audit, transport security, smali reading, component export, auth flow analysis.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 883Last active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6

  7. 7
    svc-docker-k8s

    s0ld13rr

    Docker/Kubernetes attack techniques — exposed API abuse, container escape, RBAC/privileged-pod issues, secret theft.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 883Last active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6

  8. 8
    aiml-access-diagnostics

    tamrishOfficial

    Use this skill when diagnosing IAM and access failures for Bedrock and SageMaker.

    • Published by the vendor
    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 116Last active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6

  9. 9
    bedrock-adoption-readiness

    sruvedOfficial

    Amazon Bedrock production readiness assessment covering IAM governance, data retention (ZDR), quota and capacity headroom, and operational observability…

    • Published by the vendor
    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 116Last active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6

  10. 10
    hunt-auth

    Encod3d-Sec

    Auth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth…

    • Open source (MIT)

    ★ 335Last active Aug 19, 2026Claude Code, Claude apps, Codex, Cursor +6

  11. 11
    hunt-cloud

    Encod3d-Sec

    Cloud attack hunting for AWS / Azure / GCP - credential discovery, metadata SSRF, IAM privesc, service enumeration, persistence.

    • Open source (MIT)

    ★ 335Last active Jul 28, 2026Claude Code, Claude apps, Codex, Cursor +6

  12. 12
    organization-best-practices

    better-auth

    Configure multi-tenant organizations, manage members and invitations, define custom roles and permissions, set up teams, and implement RBAC using Better…

    ★ 225Last active Sep 1, 2026Claude Code, Claude apps, Codex, Cursor +6

  13. 13
    two-factor-authentication-best-practices

    better-auth

    Configure TOTP authenticator apps, send OTP codes via email/SMS, manage backup codes, handle trusted devices, and implement 2FA sign-in flows using Better…

    ★ 225Last active Sep 1, 2026Claude Code, Claude apps, Codex, Cursor +6

  14. 14
    oauth-oidc-misconfiguration

    langbyyi

    OAuth and OIDC misconfiguration testing playbook.

    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 131Last active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6

  15. 15
    saml-sso-assertion-attacks

    langbyyi

    SAML SSO assertion attacks.

    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 131Last active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6

Related