using-flywheel

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). High confidence: the skill requires provisioning via the upstream wizard at https://agent-flywheel.com and explicitly references a "single-curl install" (remote installer execution) that the skill does not mirror or pin, so runtime/setup fetches and executes external code from that URL.