product-thinking

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly says "the canonical prompt under react.doctor/prompts/, which is what agents fetch at runtime," indicating agents load external prompt content from https://react.doctor/prompts/... at runtime and that content would directly control the agent's instructions.