eu-nis2-expert

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly delegates gap-assessment work to an SCF crosswalk and lists SCF API endpoints (https://grcengclub.github.io/scf-api/api/crosswalks/emea-eu-nis2-2022.json and https://grcengclub.github.io/scf-api/api/crosswalks/emea-eu-nis2-annex-2024.json) which are likely fetched at runtime to populate/control the assessment prompts and thus can directly influence agent behavior.