datasources-provisioning

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly runs curl against grafana.com (e.g. https://grafana.com/api/plugins?filter=infinity and https://grafana.com/api/plugins/yesoreyeram-infinity-datasource) and fetches plugin schema/examples from the plugins CDN (https://plugins-cdn.grafana.net/.../schema/dsconfig.json and .../v0alpha1.json), which are runtime-fetched artifacts that directly control how the agent builds provisioning instructions.