iblai-api-agent-skill

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill fetches skill definitions (including the "instruction" string that controls agent behavior) at runtime from the iblai API endpoints such as https://api.iblai.app/dm/api/ai-mentor/orgs/{org}/agent-skills/, so remote content from that URL directly controls prompts used by the agent.