auth0-flutter-native

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent at runtime to fetch the latest SDK version via curl from https://pub.dev/api/packages/auth0_flutter (the returned JSON is used to populate dependency version strings) and also contains an install recommendation that pipes a remote script from https://raw.githubusercontent.com/auth0/auth0-cli/main/install.sh | sh (which would execute remote code if run) — both meet the criteria for runtime external dependencies that control prompts or execute code.