wear-compose-m3

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent at runtime to fetch Google Maven metadata (https://dl.google.com/dl/android/maven2/androidx/wear/compose/compose-material3/maven-metadata.xml) and to curl/extract samples from https://dl.google.com/dl/android/maven2/androidx/wear/compose/compose-{ARTIFACT}/{VERSION}/compose-{ARTIFACT}-{VERSION}-samples-sources.jar, which are required and injected into the agent's decision-making as authoritative samples, so the external content directly controls the agent's implementation behavior.