ai-coding-agent-guardrails

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill clones git-secrets from an arbitrary GitHub repository during setup, introducing an unsecured third-party operational dependency under high provenance risk.