ppio-docs

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). Yes — the skill explicitly instructs at runtime to WebFetch external markdown files (e.g. https://raw.githubusercontent.com/PPIO/ppio-skills/main/skills/ppio-docs/references/quick-start.md) and inject them into the agent's reference context to drive responses, so fetched remote content directly influences prompts and is a required dependency.