sparkscan-ios

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly instructs the agent to fetch the official API/docs at runtime to verify APIs (e.g., https://docs.scandit.com/data-capture-sdk/ios/barcode-capture/api.html), meaning remote documentation would directly influence the agent's prompts/responses and is therefore a runtime external dependency that can control instructions.