alchemy-openapi-skill

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly requires and uses the curated OpenAPI schema at runtime via --schema-url (https://raw.githubusercontent.com/holon-run/uxc/main/skills/alchemy-openapi-skill/references/alchemy-prices.openapi.json), which is fetched and used to drive uxc/alchemy-openapi-cli behavior and thus directly controls the agent's operation schema/instructions.