gainforest-oauth-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill calls out to external ATProto PDS servers (servers.pds = "https://climateai.org" or "https://gainforest.id") and explicitly resolves user profiles via Agent.com.atproto.repo.describeRepo() during the OAuth callback, which ingests public, user-generated profile data that the agent must read and interpret.