resume-builder

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The repository includes a dependency on @chasen-liao/resume-skills@latest fetched via npx during workflow execution to run skill components, which represents an unverifiable runtime external dependency from an unpinned external package registry.