id-bolt

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill passes and uses the service URL https://app.id-scanning.com at runtime (IdBoltSession.create / session.start) which opens Scandit's hosted pop-up that runs remote UI/engine code and thus directly controls the scanning prompts and execution flow.