oauth-client-setup

SUSPICIOUS: The skill’s stated purpose is benign and no malicious data flow is shown, but its permission scope is disproportionate. A guidance-focused OAuth setup skill should not need unrestricted Bash access without clearer operational boundaries or documented endpoints.