asta-flows

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The init workflow explicitly instructs the agent to consult and fetch the beads project's install documentation at runtime (https://github.com/gastownhall/beads) and may run the project's install script or other remote install commands, which can execute remote code and thus control agent actions.