embedded

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill embeds and authenticates to Prismatic at runtime (POST to https://app.prismatic.io/embedded/authenticate and setting iframe src to https://app.prismatic.io/integration-marketplace/ and related https://app.prismatic.io/* routes), which fetches and executes remote UI/JS from app.prismatic.io that the skill depends on to function, so this is a runtime external dependency that executes remote code.