The Agent Skills Directory

[SAFE]: The skill is a technical guide for implementing OAuth2.0 server functionality using the Sa-Token framework. It contains standard architectural diagrams, configuration examples, and boilerplate code.
[EXTERNAL_DOWNLOADS]: The skill references documentation and source code from the official dromara/sa-token repository on GitHub. These links are provided for technical reference and originate from a well-known open-source project.
[CREDENTIALS_UNSAFE]: Several code snippets include placeholder credentials such as .setClientSecret("secret1") and if("admin".equals(name) && "123456".equals(pwd)). These are identified as development examples for demonstration purposes and do not pose a security risk to the user environment.
[INDIRECT_PROMPT_INJECTION]: The skill manages external data through OAuth2 parameters (e.g., redirect_uri, scope). The documentation includes necessary security configurations, such as is-check-domain: true and allow-domains, which are best practices for preventing injection and redirection attacks.
[METADATA_POISONING]: The skill includes an evaluation-report.html file which appears to be a generated quality assessment report. The content is descriptive of the skill's performance metrics and does not contain instructions designed to manipulate the agent's behavior.

sa-token-oauth2