auth-patterns

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md OAuth2/OIDC Pattern 3 clearly fetches and parses user-generated data from the public GitHub API (fetch('https://api.github.com/user')) and uses the profile fields to create/identify users and establish sessions, so untrusted third‑party content is ingested and can materially influence authentication/authorization decisions.