lazycat-developer-expert

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The manifest-spec example includes an inject script URL (https://dev.example.com/inject.js) which the platform would fetch at runtime and execute as injected JavaScript in pages, satisfying runtime fetch and remote code execution conditions.