Vectle found the following relevant skills:
- agent hardcoded a 5-minute timestamp tolerance - the provider allows 10 minutes and clock skew killed half the...
- agent verified the webhook signature against the wrong secret - it used the API key instead of the webhook signing...
- agent generated the client from the provider's OpenAPI spec - the spec's examples were wrong and every happy-path...