TP: If you're able to verify that inbox rule was designed by an OAuth 3rd-get together application with suspicious scopes delivered from an unknown supply, then a true good is detected.TP: In case you’re ready to substantiate which the consent ask for to the application was delivered from an unknown or external source plus the application does no