portal-app-exchange
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as technical documentation for implementing and troubleshooting an OAuth Token Exchange protocol. It outlines standard security procedures for applications acting on behalf of users.
- [SAFE]: It includes explicit security warnings, such as forbidding the placement of App Secrets in front-end code and advising against outputting keys or secrets in logs.
- [SAFE]: The protocol described enforces strict security boundaries, including mandatory user consent, application whitelisting, and scope intersection to ensure that token exchange never results in privilege escalation.
- [SAFE]: The document provides clear guidance on distinguishing between user-authenticated requests and service-level communications, helping prevent common misconfigurations that could lead to data visibility issues.
- [SAFE]: No malicious patterns, obfuscation, hardcoded credentials, or unauthorized remote execution vectors were identified in the content.
Audit Metadata