Test OAuth implementation for attack vectors

Use this skill when the conversation involves

Testing OAuth implementations for authorization bypass and token leakage vulnerabilities.

• · auth_token (string)
• · target (string or URL)
• · payload (JSON or binary)
• · API endpoint (string)
• · HTTP request object

• · HTTP response (JSON/text)
• · log or transcript text

• · HTTP API client
• · GitHub API
• · OAuth 2.0 authorization server

• · Valid authentication credentials
• · Service endpoint reachable
• · Source code available

• · API endpoint unreachable or rate-limited
• · Authentication failure or invalid token

• · Open-source implementation available
• · Test suite included
• · Attribution to original author(s)