goose-graphics

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly fetches remote style/format specs at runtime via the gooseworks CLI (e.g., "npx gooseworks styles get " / "npx gooseworks formats get ") and points to the central catalog (https://skills.gooseworks.ai/styles); those fetched DESIGN.md/spec files are injected into the agent context and directly control HTML generation and agent behavior, so this is a required runtime external dependency that influences prompts/instructions.