knowledge-graph

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a third‑party GitHub repository (AsiaOstrich/EngramGraph) referenced as an opt‑in engine — an unvetted external distribution point where releases or assets could contain executables, so it should be treated as potentially suspicious unless verified.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill issues runtime POST requests to the external engine endpoints "$ENGRAM_URL/graph/impact-analysis" and "$ENGRAM_URL/graph/ingest", so an external service reachable at ENGRAM_URL directly supplies the data that controls the agent's responses.