homebrew-formula-authoring

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly instructs fetching and building upstream source tarballs and language packages at install time (e.g. https://github.com/theryangeary/choose/archive/refs/tags/v1.3.7.tar.gz and PyPI resource URLs like https://files.pythonhosted.org/packages/.../dep-1.0.tar.gz), which are downloaded during runtime and executed/built as part of the formula install process.