shengwang-integration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly requires cloning and using the AgoraDynamicKey repository at https://github.com/AgoraIO/Tools (git clone --depth 1 https://github.com/AgoraIO/Tools.git) as a runtime dependency for token-server token generation, which fetches remote code that will be executed on your server and is presented as the only supported source—meeting the conditions for a high-confidence runtime code-execution dependency.