paperclip-record-strategy

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs using paperclip-wiki-fetch / paperclip-wiki-manage at runtime which POSTs to plugin bridge endpoints like POST /api/plugins/paperclipai.plugin-llm-wiki/data/page-content and may fetch public-looking wiki URLs (e.g. https://your-paperclip-host.example.com//wiki/page/wiki/sources/rl-30-day-validation-plan.md) whose returned markdown is then injected as source material for drafting plan documents, meaning remote content fetched at runtime can directly control agent prompts.