konecty-meta-sync

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill makes runtime HTTP calls to the Konecty API (host provided via KONECTY_URL or --host) to endpoints like {host}/api/admin/meta/... (e.g., /hook/validate, /reload, ///) which fetch and push hook JavaScript (.js) payloads that can control server-side execution and are required for plan/apply/pull operations.