saas-prd-review

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). scripts/run.py performs runtime POST requests to the external API at https://ai-skills.ai/api/execute (default AISKILLS_BASE_URL), and the response from that endpoint is used to produce the skill's outputs (i.e., it directly controls the agent's prompts/results).