alova-server-usage

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly requires fetching live documentation from https://alova.js.org/ at runtime and uses that fetched content to drive its answers (i.e., remote docs are injected into the agent's context and thus directly control prompts/output).