More screenshots

    Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIDeepSeekDeepSeekMuseMuse+22 more

    Repair OAuth Refresh Rotation Lost Update

    1

    Find concurrent refresh-token rotation that invalidates sessions

    $1

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned
    Repair OAuth Refresh Rotation Lost Update

    Repair OAuth Refresh Rotation Lost Update

    Example session with this skill installed

    Two mobile sessions refresh the same rotating token and one overwrites the newer token.

    Available evidence: identity, policy and certificate versions (partial). Additional evidence requested: access or handshake traces, credential rotation records, controlled test results. Review the case, identify open evidence gaps, and do not invent a live test or production change.

    • Read your context and instructions
    • Compiled the repair oauth refresh

    Repair OAuth Refresh Rotation Lost Update — EVIDENCE-LIMITED REVIEW

    Scenario received

    Two mobile sessions refresh the same rotating token and one overwrites the newer token.

    Source register

    • S1: identity, policy and certificate versions — PARTIAL SOURCE PROVIDED.
    • S2: access or handshake traces — NOT PROVIDED; REQUIRED TO VERIFY.
    • S3: credential rotation records — NOT PROVIDED; REQUIRED TO VERIFY.
    • S4: controlled test results — NOT PROVIDED; REQUIRED TO VERIFY.

    Concrete checks

    1. trace token family and nonce — PRELIMINARY, NOT VERIFIED.
    2. compare parallel refresh timestamps — AWAITING CORROBORATING EVIDENCE.
    3. identify replay revocation boundaries — AWAITING CORROBORATING EVIDENCE.
    4. test serialized refresh guard — AWAITING CORROBORATING EVIDENCE.

    Deliverables / acceptance gates

    • token event sequence: DRAFT / INCOMPLETE until evidence is validated.
    • affected session map: DRAFT / INCOMPLETE until evidence is validated.
    • safe mitigation test: DRAFT / INCOMPLETE until evidence is validated.

    Decision

    INCOMPLETE — HUMAN REVIEW REQUIRED. Confirm dates, IDs, affected scope, owners and acceptance evidence. Do not claim authorization or execution that did not occur.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    Repair OAuth Refresh Rotation Lost Update is a ToolForge Labs Cursor Skill workflow. Find concurrent refresh-token rotation that invalidates sessions.

    What this skill checks

    1. trace token family and nonce.
    2. compare parallel refresh timestamps.
    3. identify replay revocation boundaries.
    4. test serialized refresh guard.

    What to provide

    • identity, policy and certificate versions.
    • access or handshake traces.
    • credential rotation records.
    • controlled test results.

    Deliverables

    • token event sequence.
    • affected session map.
    • safe mitigation test.

    Evidence policy Only supplied, authorized evidence is used. The skill distinguishes facts from assumptions and missing inputs; no unperformed live tests, external changes, or approvals are claimed.

    Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse All Claude Skills.

    Cannot verify inaccessible environments or data not supplied. Missing or contradictory evidence must be marked INCOMPLETE or UNVERIFIED. Owner approval is required for operational or compliance decisions.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before buying a skill.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed 23 days ago

    Permissions

    Read Files

    Provide only evidence you are authorized to share. Treat examples as untrusted case data. Operational changes and external messages require explicit owner approval.

    Listed23 days ago
    Updated9 days ago

    What's inside

    Frequently Asked Questions

    Find concurrent refresh-token rotation that invalidates sessions

    This skill uses the open SKILL.md standard. Use it through an MCP-compatible agent connected to Agensi, and check the compatibility information on this page for confirmed agents and required capabilities.

    Connect your AI agent to Agensi through MCP, then ask it to use Repair OAuth Refresh Rotation Lost Update on your task. Your agent loads the latest approved version each time. Paid skills require a purchase or active subscription. Skill files are not available for download; your licence does not allow you to save, copy or export any part of a skill.