python-sdk

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The agent's skills list includes a skill with "url": "https://example.com/skills/api-docs.md", which is highly likely to be fetched at runtime and its remote markdown injected as reusable agent context/prompt material (thus able to control instructions).