add-app-clip

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). iOS devices fetch the apple-app-site-association file at runtime (e.g. https://may20.expo.app/.well-known/apple-app-site-association) to decide whether to invoke the App Clip, so this external URL directly controls execution of the Clip.