docs-review-changelog

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). This skill explicitly fetches external guidance/config at runtime—e.g., https://www.elastic.co/docs/contribute-docs/content-types/changelogs, https://raw.githubusercontent.com/elastic/docs-builder/main/config/products.yml, and https://github.com/elastic/docs-builder/blob/main/src/Elastic.Documentation/Lifecycle.cs—which are used to control validation rules and review prompts, so a compromise of those resources would directly affect the agent's behavior.