paper-illustration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill makes direct runtime calls to Google Generative Language endpoints (e.g., https://generativelanguage.googleapis.com/v1beta/models/gemini-3-pro-preview:generateContent?key=$API_KEY and https://generativelanguage.googleapis.com/v1beta/models/gemini-3-pro-image-preview:generateContent?key=$API_KEY) and then injects the returned text/image content into subsequent prompts and rendering steps, so external responses directly control the agent's prompts and workflow.