microsoft-entra-id

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill integrates Microsoft Entra ID via the Membrane CLI, allowing the agent to read user directories, groups, applications, and logs where external or user-submitted content (such as user profiles, invitation names, or audit log messages) may contain free text ingested at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the installation and execution of an npm package from the public registry (Membrane CLI), which lacks strong first-party enterprise provenance.