Alexa Skills Kit Security Testing

[dvehar]

https://developer.amazon.com/public/solutions/alexa/alexa-skills-kit/docs/alexa-skills-kit-security-testing

If you are not the owner of the credential system, your skill must pass the following criteria:
You must own the landing page that users are directed to when enabling your skill. This landing page must clearly communicate which third-party (3P) accounts are needed to link the account to the skill.

The landing page must direct the user to the domain login page owned by the OAuth providers and must be served over HTTPS.

You may not directly handle, store, or transmit credentials on behalf of the user.