The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The TokenValidator class includes a method _get_signing_key that uses the requests library to fetch JSON Web Key Sets (JWKS) from a remote URI provided via the jwks_uri parameter. This is a standard and necessary operation for verifying JWTs signed by external identity providers.
[CREDENTIALS_UNSAFE]: The implementation uses placeholders and configuration objects (OAuthConfig) for sensitive data like client_secret. No hardcoded credentials or API keys were detected in the source code.
[DATA_EXFILTRATION]: No patterns associated with unauthorized data exfiltration were found. Network operations are limited to fetching public keys for token validation.
[PROMPT_INJECTION]: The skill instructions do not contain any directives aimed at bypassing safety filters, overriding agent behavior, or extracting system prompts.

oauth