ikui

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent/operator to fetch the live manifest at https://ik-ui.pages.dev/r/registry.json (and related per-component JSONs like https://ik-ui.pages.dev/r/image-crop.json) at runtime to determine available components, meaning remote JSON directly controls the agent's install/advice behavior.