cs-build-ui-mockup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). SKILL.md explicitly instructs the runtime to "load Anthropic's frontend-design skill" and, if not installable, to "read that URL and follow it directly" (https://github.com/anthropics/skills/blob/main/skills/frontend-design/SKILL.md), meaning external content at that URL would be fetched at runtime and directly control the agent's instructions/method.