ci-cd

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The CI workflows reference and run remote GitHub Actions that are fetched and executed at runtime—e.g., subosito/flutter-action@v2 (https://github.com/subosito/flutter-action), actions/checkout@v4 (https://github.com/actions/checkout), actions/cache@v4 (https://github.com/actions/cache) and actions/upload-artifact@v4 (https://github.com/actions/upload-artifact)—which are required by the skill and execute remote code on the runner.