civitai-review

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs runtime git checkouts of the repository (.claude) via "git checkout origin/main -- .claude", which fetches agent definition files that directly control agent prompts/instructions and are required for the skill to resolve subagent types.