revdesk-api

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs agents to fetch https://www.revdesk.com/openapi.json at runtime as the "source of truth" for API paths/schemas (directly controlling agent prompts/behavior), and also recommends using npx @revdesk/sdk which executes remote code; therefore https://www.revdesk.com/openapi.json is flagged.