atmos-ci

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill references remote container images and GitHub Actions used at workflow runtime—e.g., ghcr.io/cloudposse/atmos:${{ vars.ATMOS_VERSION }}, cloudposse/atmos/actions/github-runtime@v1, actions/checkout@v6, and cloudposse/atmos/actions/cache@v1—which are fetched and executed during CI runs and thus constitute runtime external code execution.