exploiting-oauth-misconfiguration

SUSPICIOUS: the skill is internally consistent with its stated purpose, but that purpose is offensive exploitation. It provides explicit token/code theft, attacker-controlled exfiltration, and account-takeover workflows, making it a high-risk security/exploit skill rather than benign developer guidance.