get-qodo-rules

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill performs runtime fetches of repository-specific rules from the Qodo API (GET {API_URL}/rules?scopes={...}, e.g. https://qodo-platform.staging.qodo.ai/rules/v1) using the configured API key and applies those fetched rules directly to control the agent's code-generation instructions, so the external endpoint is a required runtime source that governs prompts.