payload

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to fetch remote GitHub source files at runtime (e.g. https://github.com/payloadcms/payload/blob/main/packages/payload/src/index.ts and related GitHub URLs in reference/ADVANCED.md), which would inject external content into the agent's context and therefore directly influence prompts/responses.