Oauth Debugger

• Analyzed: May 1, 2026, 9:51 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3cd1732aa65a7f10122aae754a2591e6c119d8d3b59d336812a1133e81903dce
• Source: palm
• External report: View on VirusTotal

Findings (1)

The oauth-debugger skill is a legitimate utility for troubleshooting OAuth 2.0 and OpenID Connect flows. It uses standard curl and python3 commands to inspect OIDC discovery endpoints, generate PKCE challenges, and test token exchanges. While the skill handles sensitive information like CLIENT_SECRET, it does so transparently within the context of the user-provided AUTH_DOMAIN for debugging purposes, with no evidence of data exfiltration, obfuscation, or malicious intent in SKILL.md.