slides

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly tells the agent to clone and read the external repository https://github.com/zarazhangrui/beautiful-html-templates at runtime; that repo contains AGENTS.md which directly controls the agent's operating instructions and the templates are required for Workflow A, so the fetched content would control agent behavior.