duende-skills

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

Install

If the official marketplace isn’t added yet, run

Category: Security
Author: Duende Software
GitHub: DuendeSoftware/duende-skills
Website: duendesoftware.com

Good for

Implement OAuth 2.0 and OpenID Connect flows
Configure Duende IdentityServer
Handle token management and ASP.NET Core authentication and authorization
Design identity architecture with the Backend-for-Frontend (BFF) pattern

Getting started

Run /plugin install duende-skills@claude-plugins-official in Claude Code
Optionally add the recommended dotnet-skills plugin for general .NET coverage
Ask Claude about IdentityServer, OAuth/OIDC or BFF
Use the identity-server-specialist or oauth-oidc-specialist agent when needed

Summarized by AI from the project docs; check the official docs before relying on it.

Similar tools

claude-securityOfficial plugin · Security
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.
security-guidanceOfficial plugin · Security
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
42crunch-api-security-testingOfficial plugin · Security
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.
auth0Official plugin · Security
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
crowdsecOfficial plugin · Security
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.