offensive-oauth

This is an OAuth/OIDC security-audit skill with no evident credential exfiltration or malicious install behavior. Its offensive testing and binary-analysis capabilities create elevated dual-use risk, while named-tool provenance is unverified; use should be limited to explicitly authorized targets.