build-release-engineer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes CI action references that GitHub Actions will fetch and execute at runtime (e.g., actions/checkout@v4, game-ci/unity-activate@v4, actions/upload-artifact@v4) and an in-app hotfix/crash endpoints (https://api.example.com/hotfix and https://api.example.com/crashes) that the runtime downloads and applies files from, so these external endpoints/repositories are fetched at runtime and can execute/run remote code or supply content that changes program behavior.