task-agent

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill performs a runtime git clone of the target repository (git clone "https://github.com/OWNER/REPO_NAME.git") and then spawns a subagent that reads the cloned codebase to decide and implement changes, so remote repository content fetched at runtime directly influences agent instructions and is a required dependency.