notes-revision

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly requires runtime WebFetch/WebSearch to retrieve official documentation URLs (e.g., "https://...") and uses that fetched content to verify claims and drive drafting/verification decisions, so external URLs fetched at runtime directly control agent outputs and are a required dependency.