drop saas oauth grant export · detect excessive oauth scopes · runs locally
drop saas oauth grant export · local only
heuristic screener · vendor schema varies · not definitive proof