sa-token-oauth2
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides implementation templates and documentation for the Sa-Token OAuth2.0 server. No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected.
- [EXTERNAL_DOWNLOADS]: The skill references official Sa-Token documentation and repository links hosted on GitHub under the Dromara organization, which is a well-known open-source entity in the developer ecosystem.
- [COMMAND_EXECUTION]: Workflow instructions and code examples include standard API endpoint registrations and testing steps (e.g., authorize, token exchange). While some examples include wildcard redirect URI configurations, the skill explicitly warns against these for production use and provides guidance on domain validation.
Audit Metadata