igrantio-credential-schema-loyalty-card

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly tells the operator to "Fetch the source before you rely on a claim path" and lists registry URLs (https://github.com/decentralised-dataexchange/verifiable-data-registry/tree/main/credentialSchemas/claimPathPointer/loyaltyCard, https://raw.githubusercontent.com/decentralised-dataexchange/verifiable-data-registry/main/credentialSchemas/claimPathPointer/loyaltyCard/2025.7.1/dc%2Bsd-jwt.schema.json, https://raw.githubusercontent.com/decentralised-dataexchange/verifiable-data-registry/main/credentialSchemas/claimPathPointer/loyaltyCard/2025.7.1/jwt_vc_json.schema.json, https://raw.githubusercontent.com/decentralised-dataexchange/verifiable-data-registry/main/credentialSchemas/claimPathPointer/loyaltyCard/2025.7.1/mso_mdoc.schema.json) which are intended to be fetched at runtime and directly determine the claim-path instructions the agent uses.