TP: If you're able to validate the OAuth app has encoded the Show name with suspicious scopes shipped from an not known supply, then a real positive is indica