What it can do: duende-skills

Plugin bundle · DuendeSoftware

What duende-skills declares, asks for and runs, according to the marketplaces we read. Installs into the AI tool as a plugin bundle; what it starts is listed below. None of the marketplaces we read publishes its tools or the settings it asks for. As of our marketplace pass on 2026-10-12.

This is not a security audit. We list what the marketplaces publish about this plugin: what it declares, what it asks for and what it runs. We do not run or inspect its code, and a verified mark is the marketplace's statement, not ours.

Where it runs

Installs into the AI tool as a plugin bundle; what it starts is listed below.As declared on: Claude Code: claude-plugins-official, Community GitHub marketplaces.

What it declares

None of the marketplaces we read publishes a list of tools for it.

Prompts and resources: the marketplaces we read do not publish them.

What it asks for

None of the marketplaces we read lists environment variables for it.

Names only: we keep no values, examples or descriptions of these variables. OAuth scopes and install-time settings are not published by the marketplaces we read.

What it runs besides MCP

Skills: 24 As declared on: Claude Code: claude-plugins-official.

aspnetcore-authentication
aspnetcore-authorization
claims-authorization
duende-bff
identity-security-hardening
identity-testing-patterns
identityserver-api-protection
identityserver-aspire
identityserver-configuration
identityserver-dcr
identityserver-deployment
identityserver-hosting-setup

Show the remaining 12

identityserver-key-management
identityserver-saml
identityserver-sessions-providers
identityserver-stores
identityserver-token-lifecycle
identityserver-token-security
identityserver-ui-flows
identityserver-upgrade-v7-to-v8
identityserver-usermanagement
identityserver4-migration
oauth-oidc-protocols
token-management

Agents: 2 As declared on: Claude Code: claude-plugins-official.

identity-server-specialist
oauth-oidc-specialist

Who answers for it

DuendeSoftware

No marketplace we read marks it or its publisher as verified.
No marketplace we read states its license.
The repository github.com/duendesoftware/duende-skills belongs to the account the publisher is listed under on Claude Code: claude-plugins-official.

How it has changed

Its tools, settings, hooks and composition have not changed since we started watching it.

In context

Median number of secrets a plugin bundle asks for on the marketplaces we read: 0.0. This one asks for: 0.
Share of plugin bundles that run on a remote server: 17%.

Where it is published and how its figures have moved

Compare it side by side with similar plugins

Data comes from the public marketplace file https://github.com/anthropics/claude-plugins-official/blob/HEAD/.claude-plugin/marketplace.json. Data comes from public marketplace files in GitHub repositories of their authors. Figures come from our own regular passes over the marketplaces, last read on 2026-10-12. We publish no contact details for plugin publishers.