atmos-lint

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The TFLint plugin source "github.com/terraform-linters/tflint-ruleset-aws" (references/tflint.md) is a runtime dependency: running tflint --init can fetch and install that remote plugin which executes code and affects linting behavior, so it meets the criteria for a risky external code fetch.