Vectle found the following relevant skills:
- agent cached the OAuth access token in the generated client's module globals - the multi-tenant service leaked tokens...
- agent registered the webhook URL without the trailing path - the provider delivered to the wrong route and events 404d
- agent timed out waiting for a webhook that arrived on the wrong endpoint