PlugMyPlugin
← Browse

qa-auth-flows

testland ★ 10

This plugin provides six skills and one agent for testing OAuth 2.0/OIDC authentication flows across Keycloak, Auth0, and Okta, plus reusable patterns for session management and MFA based on RFC 6749, RFC 7636 PKCE, and OWASP ASVS V3. The token-storage-security-critic agent performs adversarial code review to detect token-storage and session anti-patterns like localStorage JWTs and missing httpOnly flags.

Testing Security No API key detected prompt pack

Install

> /plugin marketplace add testland/qa/tree/HEAD/plugins/qa-auth-flows
> /plugin install qa-auth-flows

Source: https://github.com/testland/qa/tree/HEAD/plugins/qa-auth-flows

What it's made of

1 agent · 6 skills

Commands
0
Agents
1
Skills
6
MCP servers
0
Hooks
0

What it needs & plugs into

API keys
none
Paid services
none detected
External tools
none
Talks to
nothing external detected

Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (testland).