javascript-sdk

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill example includes a skill entry that points to an external document URL (https://example.com/skills/api-docs.md), which is very likely fetched at runtime and injected as reusable agent context (thereby directly controlling prompts), so this external URL is a runtime dependency that can control the agent.