payloads-oauth

The skill has no evident supply-chain or hidden data-exfiltration behavior, but it provides actionable OAuth exploitation techniques that could enable token theft or account takeover if used against unauthorized targets. Classify as suspicious/high security risk, not confirmed malware.