igrantio-api-api-keys

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the agent to fetch the raw OpenAPI specification at https://docs.igrant.io/openapispecifications/oid4vc.yaml at runtime to determine the authoritative behaviour, so that external URL can directly control the agent's instructions.