oauth-oidc-implementer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill fetches and parses open OIDC discovery documents via getOIDCConfig(issuer) (calling ${issuer}/.well-known/openid-configuration) and uses jwks URIs/jwt fetching (jwksClient) — clearly ingesting public, potentially untrusted third-party content as part of its runtime workflow.