loom-kustomize

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes remote repository references that Kustomize/ArgoCD/Helm will fetch at build/runtime (e.g., https://github.com/org/repo/k8s/base?ref=v1.0.0, github.com/org/repo/manifests?ref=main, https://github.com/org/repo, https://charts.bitnami.com/bitnami), and those fetched manifests/charts can directly control the generated/applyable configuration, so they are runtime external dependencies that affect agent behavior.