igrantio-credential-schema-software-statement

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly says "Fetch the source before you rely on a claim path" and names external registry URLs (e.g. https://raw.githubusercontent.com/decentralised-dataexchange/verifiable-data-registry/main/credentialSchemas/claimPathPointer/softwareStatement/2025.7.1/dc+sd-jwt.schema.json) that would be fetched at runtime and whose JSON controls the skill's claim-path behavior.