dws-shared

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the agent to fetch shared alidocs short-link content at runtime using read_url (e.g. https://alidocs.dingtalk.com/i/p/Y7kmbokZp3pgGLq2), which causes external content to be injected into the agent context and thus meets the runtime-fetch-and-inject criterion.