configure-oauth-metadata
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a configuration guide for OAuth discovery endpoints (
.well-known/oauth-authorization-server, etc.). It does not contain any malicious code, obfuscation, or unauthorized data access patterns. - [SAFE]: It promotes secure practices by enforcing PKCE (S256), cryptographic token binding (azp and DID claims), and proper CORS headers to allow cross-origin agent discovery.
- [SAFE]: The security guardrails correctly reference OWASP principles (ASI03, ASI04, ASI05) to prevent identity abuse, supply chain drift, and RCE through template injection by recommending static schemas over dynamic templates.
- [SAFE]: The tool access is scoped to standard file and database operations required for managing infrastructure configuration files in a development environment.
Audit Metadata