validate-deployment

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runtime fetches the Lambda package via the Code.Location URL returned by aws lambda get-function (LAMBDA_URL) and then runs curl -s -o /tmp/lambda-pkg.zip "$LAMBDA_URL" and unzip to inspect prompt templates and code, which means remotely hosted content that controls agent prompts and code is fetched and relied upon at runtime.