awesome-ai-security-tools-guide

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime instructions to "git clone https://github.com/scadastrangelove/agent-audit.git" and then run "pip install -r requirements.txt" and "python agent-audit.py", which fetches remote code from that URL and executes it locally, satisfying the criteria for a runtime external dependency that executes remote code.