night-market-build-and-env

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The first-hour verification explicitly runs git clone git@github.com:athola/claude-night-market.git (SKILL.md:64), which fetches remote repository code that is then used/executed during setup and therefore is a runtime external dependency.