portaljs-add-chart

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly tells the operator/agent to "Read and follow" the canonical step-by-step workflow hosted at https://github.com/datopian/portaljs/blob/main/.claude/commands/portaljs-add-chart.md, which is a remote markdown that would be fetched at runtime and directly controls the agent's instructions.