launch-x

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly says it will "read the live site (via browse)" using the user-supplied product URL (the live product URL provided at runtime), which will be fetched during runtime and directly used to ground and generate the agent's prompts/copy, so that external content can control the agent's output.