auditclaw-idpIdentity provider compliance checks for auditclaw-grc. 8 read-only checks across Google Workspace (MFA, admin audit, inactive users, passwords) and Okta (MFA...
Install via ClawdBot CLI:
clawdbot install mailnike/auditclaw-idpGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Calls external URL not in known-safe list
https://www.auditclaw.aiUses known external API (expected, informational)
googleapis.comAudited Apr 17, 2026 · audit v1.0
Generated Mar 21, 2026
A SaaS company undergoing SOC2 Type II audit needs to demonstrate identity provider compliance. This skill automates evidence collection for Google Workspace and Okta, verifying MFA enforcement, password policies, and user activity to meet access control and security monitoring requirements.
A healthcare organization using Google Workspace or Okta must comply with HIPAA security rules. The skill checks for strong password policies, MFA on all accounts, and inactive user management to ensure protected health information (PHI) is accessed only by authorized, active personnel.
A financial institution subject to regulations like GLBA or FFIEC guidelines uses this skill to audit identity providers. It validates session timeouts, password strength, and admin account security to prevent unauthorized access and meet stringent financial compliance standards.
A large enterprise rolling out MFA across Google Workspace or Okta needs to verify enforcement. This skill scans all active users to ensure MFA enrollment, identifying non-compliant accounts for remediation and providing automated evidence of security posture improvement.
An organization seeking ISO 27001 certification uses the skill to gather evidence for identity management controls. It checks password policies, inactive user cleanup, and admin audit trails, automating documentation for Annex A controls related to access management and user accountability.
A consultancy offers ongoing compliance monitoring using this skill to automate evidence collection for clients. They integrate it into audit workflows, charging subscription fees for regular sweeps and reports that demonstrate adherence to SOC2, HIPAA, or ISO standards.
An MSSP bundles this skill into their security offerings to monitor client identity providers. They use it for proactive threat detection, such as identifying weak passwords or inactive accounts, and upsell remediation services based on findings.
Large enterprises adopt the skill internally to streamline audit processes. It reduces manual effort for IT and compliance teams, saving costs on external audits and enabling continuous monitoring, with value derived from operational efficiency and risk reduction.
💬 Integration Tip
Ensure auditclaw-grc is installed first and environment variables are set correctly for each provider; use the test-connection command to verify setup before running full sweeps.
Scored Apr 19, 2026
Self-hosted auth for TypeScript/Cloudflare Workers with social auth, 2FA, passkeys, organizations, RBAC, and 15+ plugins. Requires Drizzle ORM or Kysely for D1 (no direct adapter). Self-hosted alternative to Clerk/Auth.js. Use when: self-hosting auth on D1, building OAuth provider, multi-tenant SaaS, or troubleshooting D1 adapter errors, session caching, rate limits, Expo crashes, additionalFields bugs.
Clerk integration. Manage Users, Organizations. Use when the user wants to interact with Clerk data.
Clerk auth with API Keys beta (Dec 2025), Next.js 16 proxy.ts (March 2025 CVE context), API version 2025-11-10 breaking changes, clerkMiddleware() options, webhooks, production considerations (GCP outages), and component reference. Prevents 15 documented errors. Use when: API keys for users/orgs, Next.js 16 middleware filename, troubleshooting JWKS/CSRF/JWT/token-type-mismatch errors, webhook verification, user type inconsistencies, or testing with 424242 OTP.
Sentry API integration with managed authentication. Monitor errors, issues, and application performance. Use this skill when users want to list issues, retrieve events, manage projects, teams, or releases in Sentry. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. Every call is authenticated as the user's connection and reaches only what that connection's authorization allows, which the provider enforces on every request; the endpoints documented here are the ones this skill uses, and any other endpoint of this app needs the user to ask for it by name. Default to read and list calls, and confirm every write or new connection with the user. This file also documents the three constructs that turn a Sentry connection into automation, in the order they are used: the connection (the first step), a hosted function that runs a Sentry action through the Maton SDK, and a trigger that calls that function on a schedule or on an event. Those sections are the platform's own reference text, shared with the api-gateway skill, with Sentry examples; they add no Sentry capability - Sentry is not an event source, a trigger cannot read Sentry data, and the files under `references/<source>/triggers.md` are the platform's event catalogues for the sources Maton offers (time, Calendly, GitHub, Gmail, HubSpot, Linear, Notion, Slack, Stripe).
Host static files on subdomains with optional authentication. Use when you need to serve HTML, images, CSS, JS, or any static content on a dedicated subdomain. Supports file upload, basic auth, quota management, and automatic SSL via Caddy. Commands include sf sites (create/list/delete), sf upload (files/directories), sf files (list/delete).
Download YouTube videos by URL in various resolutions using a pay-per-use API with credit-based authentication and no charge on failed downloads.