bmad-tea-framework

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The instruction set for the skill defines a dynamic URL fetch (npx skills add bmad-code-org/bmad-method-test-architecture-enterprise --skill bmod-tea) to install missing knowledge modules at runtime, constituting a weak/unknown/suspicious operational external dependency.