recoup-platform-api-access

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent at runtime to fetch and grep the documentation hosted at https://docs.recoupable.dev/llms-full.txt (and to pull OpenAPI JSON such as https://docs.recoupable.dev/api-reference/openapi/research.json), which are runtime-fetched documents that the agent must read to determine exact API paths/parameters and thus directly control the agent's prompts/behavior.