retro

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runs git fetch origin ... at runtime, which pulls commit history from the repository's configured remote (the git "origin" URL) and then directly uses the fetched commit data to generate prompts/narratives, so the remote git URL (origin) is a runtime external dependency that can control the agent's output.