atlas-best-practices

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains runtime-executed external references: "ariga.io/atlas-provider-gorm" is invoked via "go run" (which will fetch and execute a remote Go module at runtime) and "ariga/setup-atlas@v0" is referenced as a GitHub Action (which executes remote action code during CI), so these are external dependencies that execute remote code at runtime.