Baseline · Credential management
E-03 Uses short-lived / least-scope tokens
medmanual review
Why it matters
Skills get scoped, temporary credentials.
How to test
Inspect token scope and lifetime.
How to fix
Use short-lived, least-scope temporary tokens.