langchain

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill contains a runtime fetch that directly supplies agent prompts via hub.pull("hwchase17/react"), which pulls remote prompt content that would control the agent's instructions at runtime.