Duende Agent Skills
A set of agent skills and specialized agents for Duende IdentityServer, Backend-for-Frontend (BFF), and identity/access management development. Covers OAuth 2.0, OpenID Connect, Duende, token management, ASP.NET Core authentication and authorization, and related skills needed to build production-grade identity infrastructure.
Your Feedback 🗣️
We would love to hear your feedback about these skills! What's working? What's not? What's missing?
For questions, feedback, or community discussions, visit the Duende Community.
Installation
You can use several AI coding assistants that support skills/agents.
Claude Code (CLI)
Official Docs
Run these commands inside the Claude Code CLI:
/plugin marketplace add DuendeSoftware/duende-skills
/plugin install duende-skills
To update:
/plugin marketplace update
Recommended: Also install dotnet-skills for general .NET development coverage:
/plugin marketplace add Aaronontheweb/dotnet-skills
/plugin install dotnet-skills
GitHub Copilot
Official Docs
Clone or copy skills to your project or global config:
Project-level (recommended):
git clone https://github.com/DuendeSoftware/duende-skills.git /tmp/duende-skills
cp -r /tmp/duende-skills/skills/* .github/skills/
Global (all projects):
mkdir -p ~/.copilot/skills
cp -r /tmp/duende-skills/skills/* ~/.copilot/skills/
Recommended: Also install dotnet-skills for general .NET development coverage.
OpenCode
Official Docs
git clone https://github.com/DuendeSoftware/duende-skills.git /tmp/duende-skills
# Global installation (directory names must match frontmatter 'name' field)
mkdir -p ~/.config/opencode/skills ~/.config/opencode/agents
for skill_file in /tmp/duende-skills/skills/*/SKILL.md; do
skill_dir=$(dirname "$skill_file")
skill_name=$(grep -m1 "^name:" "$skill_file" | sed 's/name: *//')
mkdir -p ~/.config/opencode/skills/$skill_name
cp "$skill_file" ~/.config/opencode/skills/$skill_name/SKILL.md
# Copy bundled resources (docs/, references/, etc.) if present
find "$skill_dir" -mindepth 1 -maxdepth 1 -type d -exec cp -r {} ~/.config/opencode/skills/$skill_name/ \;
done
cp /tmp/duende-skills/agents/*.md ~/.config/opencode/agents/
Recommended: Also install dotnet-skills for general .NET development coverage.
Skills Library
Identity & OAuth
| Skill | Description |
|---|
aspnetcore-authentication | ASP.NET Core authentication middleware — OIDC, JWT Bearer, cookies, schemes, external providers |
aspnetcore-authorization | ASP.NET Core authorization — policies, IAuthorizationHandler, scope-based API authz, minimal APIs |
claims-authorization | Claims-based authorization — policies, requirement handlers, resource-based authz, claims transformation |
duende-bff | Backend-for-Frontend security framework for SPAs — session management, API proxying, token management |
identity-security-hardening | Security hardening — key rotation, HTTPS, CORS, CSP, rate limiting, token lifetime tuning |
DuendeSoftware