okta-cis-to-descope

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly runs runtime Okta API calls (e.g., "curl -H 'Authorization: SSWS ${OKTA_API_TOKEN}' 'https://${OKTA_DOMAIN}/api/v1/policies?type=ACCESS_POLICY'", "https://${OKTA_DOMAIN}/api/v1/users?limit=200", and "https://${OKTA_DOMAIN}/api/v1/authn") to fetch policies, users, and authentication results which are required before writing the migration plan and thus directly control the agent's guidance and actions.