duende-skills Claude Code Plugin
Claude Code PluginClaude CodeSecuritySecurity, Auth & ComplianceClaude Code Customization & WorkflowThe explanation below is AI-generated. Please verify it against the sources.
duende-skills is a Claude Code plugin that packages a library of specialized skills and two expert agents for building identity and access management solutions with Duende IdentityServer and related technologies. It covers OAuth 2.0 and OpenID Connect fundamentals, ASP.NET Core authentication and authorization, Backend-for-Frontend (BFF) patterns, token lifecycle and security, SAML, dynamic client registration, key management, and migration/upgrade guidance for IdentityServer versions. According to the README, each skill was benchmarked with graded prompts comparing answers with and without the skill loaded, showing substantial accuracy gains when the skill is active. The plugin also ships two agents focused on IdentityServer configuration/troubleshooting and on OAuth/OIDC protocol expertise. It is installable into Claude Code, GitHub Copilot, or OpenCode as a set of local skill and agent files rather than a live network integration.
What you can do with duende-skills
- Install the skill and agent bundle into Claude Code, GitHub Copilot, or OpenCode
- Draw on skills covering IdentityServer configuration, hosting, deployment, key management, stores, and SAML
- Use skills for token lifecycle, token security (DPoP, mTLS, PAR, FAPI), and dynamic client registration
- Apply ASP.NET Core authentication/authorization and claims-based authorization guidance
- Use the duende-bff skill for Backend-for-Frontend session and token handling in SPAs
- Get help with IdentityServer4-to-Duende and v7-to-v8 migration steps
- Consult the identity-server-specialist and oauth-oidc-specialist agents for configuration and protocol questions
- Review the README's evaluation benchmarks comparing skill-assisted answers against baseline model answers