okta

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The Okta integration skill retrieves user and organizational directory data via the Membrane CLI and API, which can contain user-submitted input (such as user profiles and names) without unprompted continuous monitoring of external submission feeds.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the installation and execution of an external CLI package via npm without verifiable first-party publisher provenance or a direct source repository URL, representing an unverified runtime external dependency.