igrantio-schema-discovery

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the agent to "fetch the linked repositories" at runtime and uses GitHub repository contents as the authoritative templates that will be used to build/drive credential schemas and queries (e.g., https://github.com/decentralised-dataexchange/verifiable-data-registry/tree/main/credentialSchemas/claimPathPointer, https://github.com/decentralised-dataexchange/verifiable-data-registry/tree/main/presentationDefinitions/dcqlQuery, https://github.com/webuild-consortium/webuild-attestation-rulebooks-catalog), so external content would directly control prompts/instructions during runtime.