set-up-wso2-open-banking

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly downloads and installs remote binary artifacts at runtime — e.g. the JDBC driver curl to https://repo1.maven.org/maven2/com/mysql/mysql-connector-j/9.6.0/mysql-connector-j-9.6.0.jar and the APIM connector zips such as https://apim.docs.wso2.com/en/4.2.0/assets/attachments/administer/wso2is-extensions-1.6.8.zip — which are required dependencies that will be placed into product directories and can result in execution of remote code when the WSO2 servers run.