pachca-oauth
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx -y @pachca/clito download and execute the vendor's official command-line interface from the NPM registry. This is a standard method for accessing utility tools. - [COMMAND_EXECUTION]: The instructions utilize the
Bashtool to run CLI commands for checking authentication status and retrieving token information. These operations are consistent with the skill's stated purpose of providing OAuth metadata. - [CREDENTIALS_UNSAFE]: The skill guides the user on providing a
PACHCA_TOKENvia environment variables or command flags. It does not contain hardcoded credentials and uses standard practices for handling API tokens within a CLI environment.
Audit Metadata