scholar-evaluation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The generate_schematic and generate_schematic_ai scripts call the OpenRouter API at https://openrouter.ai/api/v1 at runtime (requiring OPENROUTER_API_KEY), and the API's review responses/outputs are consumed to modify prompts and control iterative regeneration, so external content directly controls agent prompting and is a required dependency.