collab-workflow-git-discipline-cpp

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs installation from an individual-owned GitHub repository via npx, constituting an operational third-party unofficial dependency with medium provenance risk.