n8n:node-add-oauth

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md Step 2 ("Research OAuth2 endpoints") explicitly instructs the agent to look up and use a service's public OAuth2 documentation (open third‑party websites) to determine authorization/token URLs and parameters that are then incorporated into generated credential code, so untrusted external content can directly influence tool decisions and code generation.