Oauth Oidc
v1.0.0Deep OAuth 2.0 / OpenID Connect workflow—choosing flows for client type, PKCE, tokens and validation, scopes and consent, rotation, and common misconfigurati...
⭐ 0· 107·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the SKILL.md content. The guidance is about choosing flows, PKCE, tokens, scopes, logout and hardening; nothing in the package asks for unrelated access or credentials.
Instruction Scope
SKILL.md contains prescriptive design and implementation guidance only. It does not instruct the agent to read files, access env vars, call external endpoints, or exfiltrate data; scope is limited to documentation and recommendations.
Install Mechanism
No install spec and no code files are present (instruction-only). That minimizes disk/network risk; nothing will be downloaded or written by the skill itself.
Credentials
The skill declares no required environment variables, credentials, or config paths, which is appropriate for a documentation/consulting skill.
Persistence & Privilege
always is false and there is no other persistence or privileged configuration. The skill permits normal autonomous invocation (disable-model-invocation is false), which is standard for skills and not problematic here because no sensitive access is requested.
Assessment
This skill is instruction-only and internally consistent with its stated purpose—no code, no installs, and no credentials are requested. You can install it without exposing secrets, but remember: (1) it only provides guidance and won't perform actions for you; (2) verify any later updates that add install scripts, environment variables, or network calls before granting extra privileges; and (3) if you want to be extra cautious, disable autonomous invocation so the agent only runs the skill when you explicitly call it.Like a lobster shell, security has layers — review code before you run it.
latestvk971096wgqc9p0vvx74tx9cqmx83geay
License
MIT-0
Free to use, modify, and redistribute. No attribution required.