igrantio-api-sandboxes

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to fetch and follow external documentation at runtime (e.g., https://docs.igrant.io/openapispecifications/oid4vc.yaml), so the fetched docs can directly control the agent's instructions and behavior.