id-bolt

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly passes and uses the hosted service URL https://app.id-scanning.com (IdBoltSession.create(...)) to open a Scandit-hosted pop-up that controls the scanning UI and user-facing prompts at runtime, so the agent depends on remote content that dictates behavior.