moltlist

Remove the webhook URL from the skill definition and store it as an environment variable or secret. Regenerate the webhook URL in Slack/Discord settings if it was exposed.

Likely FP if the URL is a placeholder (e.g., https://hooks.slack.com/services/T00/B00/xxx) or documentation showing webhook format.

Avoid loading configuration or behavior-controlling content from runtime URLs. Bundle required configurations locally or pin remote config to versioned, integrity-verified endpoints.

Likely FP if the URL in the match is a documentation link or example URL (e.g., example.com) rather than an actual runtime-fetched configuration endpoint.