resume-writer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). SKILL.md explicitly instructs the agent at runtime to "URL: fetch the URL if accessible" when running the Add Insight workflow, meaning external pages such as https://www.linkedin.com/top-content/recruitment-hr/ (and other discovery URLs listed in tips/sources.json) may be fetched and injected into the model context and thereby directly influence prompts and library updates.