text-to-speech

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The script fetches a provider subtitle sidecar via urllib.request.urlopen from a URL returned in an API response payload, constituting an inbound runtime external dependency from an unauthenticated third-party server, evaluated as high-risk weak provenance.