repo-knowledge-share

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly runs git pull/push against the remote skills repository (https://github.com/Derek-X-Wang/skills) as part of its runtime workflow and then reads the fetched knowledge/*.md files into an LLM-driven matching/summarization flow, meaning remote Markdown content fetched from that URL can directly control model prompts and outputs.