botlearn

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The Quick Start and Self-Update flows fetch-and-extract the remote archive https://www.botlearn.ai/sdk/botlearn-sdk.tar.gz at runtime, which injects SKILL.md/SDK files that directly control the agent's prompts/behavior and therefore is a required runtime dependency that can alter instructions.