go-htmx-frontend

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs downloading and executing third-party binaries and assets from unpinned GitHub releases and external CDNs (Tailwind, HTMX, Alpine.js) during installation and setup, constituting weak/unknown operational dependencies.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill prompt suggests installing a developer tool globally using sudo privileges, which modifies system directories that require elevated privileges.