dev-requirements

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill repeatedly instructs running "npx ai-devkit@latest" commands (for example "npx ai-devkit@latest lint"), which fetch and execute remote npm package code at runtime, so this is a required external runtime dependency that can execute remote code.