terraform-ops

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The GitHub Actions workflow (assets/github-actions-terraform.yml) contains several "uses: owner/repo@ref" action references that are fetched and executed at runtime by GitHub Actions (for example actions/checkout → https://github.com/actions/checkout, aquasecurity/trivy-action → https://github.com/aquasecurity/trivy-action, hashicorp/setup-terraform → https://github.com/hashicorp/setup-terraform, aws-actions/configure-aws-credentials → https://github.com/aws-actions/configure-aws-credentials), which are runtime external dependencies that execute remote code and the workflow (the skill) relies upon them.