s3-user-files

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill fetches user-controlled S3 objects at runtime (read.js uses S3 GetObjectCommand and presign.js returns presigned S3 URLs via getSignedUrl), e.g. https://{BUCKET}.s3.{REGION}.amazonaws.com/{user_id}/{filename} or the presigned URL printed by presign.js, and those file contents (IDENTITY.md, notes, etc.) are used by the agent to form responses, so remote S3-hosted content can directly control agent behavior.