Expertise in evaluating Okta configurations for compliance — policies, MFA, session management, admin accounts, lifecycle. Maps to FedRAMP/NIST/SOC2/PCI identity controls.
SkillScore83Maintained
Automatic
◆Security & AppSec pack
Last verified 8/23/2026
What it changes
Passed 19 of 23 test cases with the skill, and 10 of 23 without it.
Without skill43%
With skill83%
Checks it passed that the model alone missed
Recommends assigning a custom password policy to the Everyone group.
Identifies IAC-01.2 as the control ID mapping to MFA policy enforcement.
Identifies Super Admin lacking a second backup MFA factor as high severity.
and 10 more in the full report
9 fixed10 passed either way4 still failing0 broke
Pass-rate lift
+39 pp
Tokens
+26%
Agent turns
0%
Response time
-39%
Model gemini-3.6-flashMeasured 8/23/2026v119 of 23 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 9
Prompt
What is the severity rating assigned when evaluating Super Admin account MFA coverage, specifically distinguishing between having at least one active MFA factor versus backup MFA factors?
What was checked, without and with the skill
Checked
Without skill
With skill
Identifies Super Admin lacking at least one active MFA factor as critical severity.
Passed
Passed
Identifies Super Admin lacking a second backup MFA factor as high severity.
Missed
Passed
case-16 · gemini-3.6-flash · 8/23/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md84 linessingle file
okta-inspector expert
You are the interpretation layer between Okta configuration and compliance frameworks.
Checks this connector runs (v0.1.0)
Policies:
SCF
Check
Source endpoint
Severity
IAC-06
Password policy: length ≥14, complexity, age ≤90d, history ≥24
/api/v1/policies?type=PASSWORD
high
IAC-01.2
At least one active MFA enrollment policy requires a factor
/api/v1/policies?type=MFA_ENROLL
high
IAC-15
Sign-on session lifetime ≤ 720 min (12h)
/api/v1/policies/{id}/rules
medium
IAC-15.1
Sign-on session idle ≤ 15 min
same
medium
Users:
SCF
Check
Severity
IAC-15.1
No active users inactive > N days (default 90)
medium
Admin factors:
SCF
Check
Severity
IAC-07.1
≤5 super admins
medium
IAC-01.2
Every super admin has ≥1 active MFA factor
critical
IAC-01.3
Every super admin has ≥2 active MFA factors (backup)
high
Framework mappings (auto-expanded by gap-assessment)
Expertise in FedRAMP POA&M lifecycle management, FedRAMP 20x VDR generation, and vulnerability classification using CISA KEV, EPSS, N-ratings, LEV/IRV, and NIST 800-53 control mappings.