xion-oauth2-client
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the xion-toolkit CLI for OAuth2 client lifecycle management (create, list, update, delete), which is the intended behavior for interacting with Xion infrastructure.
- [COMMAND_EXECUTION]: The rotate-secret.sh script automates the client secret rotation process by invoking the xion-toolkit CLI. It uses safe argument passing (bash arrays) to prevent shell injection.
- [CREDENTIALS_UNSAFE]: The skill manages OAuth2 client secrets but contains no hardcoded credentials. It explicitly instructs users to store secrets securely and implements redaction in CLI output.
- [INDIRECT_PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection as it processes user-provided client metadata.
- Ingestion points: Client name, contact emails, and redirect URIs in create.json and update.json.
- Boundary markers: None explicitly defined.
- Capability inventory: Shell execution of xion-toolkit and rotate-secret.sh.
- Sanitization: Relies on the xion-toolkit CLI for input validation and parameter parsing.
Audit Metadata