Drive the AADInternals PowerShell toolkit to perform Microsoft Entra ID tenant reconnaissance, access-token acquisition across Microsoft APIs, and federation/AD FS backdoor testing (Golden SAML, T1606.002) for defensive validation. Use during an authorized Entra ID/Microsoft 365 red-team assessment to map external attack surface or verify AD FS signing certs resist Golden SAML.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill auditing-entra-id-with-aadinternalsnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill auditing-entra-id-with-aadinternals -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill auditing-entra-id-with-aadinternals -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/auditing-entra-id-with-aadinternalsgh skill install mukul975/Anthropic-Cybersecurity-Skills auditing-entra-id-with-aadinternalsgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/auditing-entra-id-with-aadinternals ~/.claude/skills/auditing-entra-id-with-aadinternals # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/auditing-entra-id-with-aadinternals ~/.agents/skills/auditing-entra-id-with-aadinternals # Codex, Cursor, Gemini CLI, Copilot, OpenCode