Configure with oauth2 flow helper operations. Auto-activating skill for Security Fundamentals.
SkillScore100Maintained
Automatic
◆Security & AppSec pack
Last verified 8/29/2026
What it changes
Passed 22 of 22 test cases with the skill, and 21 of 22 without it.
Without skill95%
With skill100%
Checks it passed that the model alone missed
Specifies returning the error code invalid_grant in the JSON response payload
1 fixed21 passed either way0 still failing0 broke
Pass-rate lift
+5 pp
Tokens
+19%
Agent turns
0%
Response time
+1%
Model gemini-3.6-flashMeasured 8/29/2026v122 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
A test case the skill fixed. Same model, same prompt, with and without the skill.
Prompt
When a client attempts to exchange an expired or previously used authorization code at the token endpoint, what standardized OAuth 2.0 error code should the authorization server return per RFC 6749?
What was checked, without and with the skill
Checked
Without skill
With skill
Specifies returning the error code invalid_grant in the JSON response payload
Missed
Passed
case-21 · gemini-3.6-flash · 8/29/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md60 linessingle file
Oauth2 Flow Helper
Overview
This skill provides automated assistance for oauth2 flow helper tasks within the Security Fundamentals domain.
When to Use
This skill activates automatically when you:
Mention "oauth2 flow helper" in your request
Ask about oauth2 flow helper patterns or best practices
Need help with essential security skills covering authentication, input validation, secure coding practices, and basic vulnerability detection.
Instructions
Provides step-by-step guidance for oauth2 flow helper
Follows industry best practices and patterns
Generates production-ready code and configurations
Validates outputs against common standards
Examples
Example: Basic Usage
Request: "Help me with oauth2 flow helper"
Result: Provides step-by-step guidance and generates appropriate configurations
Prerequisites
Relevant development environment configured
Access to necessary tools and services
Basic understanding of security fundamentals concepts