okta-cis-to-descope

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow includes fetching Okta policy/configuration data via curl + piping through jq in Step 1b Policy analysis, and that retrieved (outsider/auth-admin sourced) free-text JSON is then ingested into the LLM context to generate MIGRATION-PLAN.md.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires and calls external runtime endpoints — notably the Descope Docs MCP (https://docs-mcp.descope.com/ and server URL https://docs-mcp.descope.com/mcp) and Okta Management API endpoints (e.g., https://${OKTA_DOMAIN}/api/v1/policies?... and https://${OKTA_DOMAIN}/api/v1/users?...), which are fetched at runtime and directly control the migration plan and generated code, so they are runtime external dependencies that influence agent prompts/instructions.