dc

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill exposes the agent to untrusted third-party content because the command catalog explicitly includes a command that ingests arbitrary external URLs (dc global-management idp import-open-id-configuration with the --url flag) which would cause the system to fetch and use OpenID configuration from an untrusted public URL.