claude-academy-guide

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to fetch the live catalog at runtime (https://academy.claude.com/assets/data/catalog.json), and that fetched JSON directly governs which item URLs and content the agent may present, so this external URL is a runtime dependency that controls agent output.