agent-desk

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly opens and drives a remote GitHub Pages SPA at runtime ("https://.github.io//"), which loads and executes JavaScript in the browser that exposes window.agentAPI and supplies LLM-targeted instructions in the DOM, so the agent relies on and executes remote code that can directly control prompts and behavior.