It’s definitely slop of some kind.

  capabilities: ["read:content", "email:send"],
  

Why mixed ”permission:scope” and ”scope:permission”?