neo

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the Librarian to fetch external sources at runtime (e.g., via "acli jira workitem view --json" and confluence fetches) — pulling live content from URLs such as https://.../browse/GI-52 and Confluence locators (e.g. https://.../wiki/.../NEOACCT) into docs/knowledge/, and that fetched content is then used to drive BA/Architect prompts and decisions (BA5 / coverage checks), so these runtime fetches directly control agent behavior.