doc-extract-engine

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime client contacts external API endpoints (e.g., http://39.104.68.74:8082 and the default http://192.168.41.78) which return SSE events including AI-generated "schema" and messages that the client consumes and uses as runtime instructions to control extraction behavior, so external content directly controls the agent's prompts/operation.