{"slug":"exploiting-oauth-misconfiguration","source_name":"exploiting-oauth-misconfiguration","name":"Exploiting OAuth Misconfiguration","description":"Identifying and exploiting OAuth 2.0 and OpenID Connect misconfigurations including redirect URI manipulation, token leakage, and authorization code theft during security assessments.","version":1,"lift":{"pass_rate_delta_pts":9.09,"pass_rate_pct":9.1,"total_cases":22,"passed_cases":2,"tokens_delta_pct":124.5,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-31T02:10:39.015583+00:00"},"skill_score":0.0909,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":9.09,"with_pass_pct":9.1,"without_pass_pct":0,"tokens_delta_pct":124.5,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":false,"completed_at":"2026-07-31T02:10:39.015583+00:00","run_id":"72e9efa4-53bd-4c8d-ad74-3750782908eb","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":null,"content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"85651aa067f539f3dea4b3e577f1a0021e729b55e8b251bf2478ba7325477e24","raw_url":"https://app.decimal.ai/s/exploiting-oauth-misconfiguration/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/exploiting-oauth-misconfiguration"}