orchestrate-herdr

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires reading SPEC_URL at runtime (SKILL.md:42) and the repo includes the example URL https://github.com/org/repo/issues/42 (evals/test-cases.md:13, evals/evals.json:7) whose fetched content would be used to construct worker prompts, so the external URL directly controls prompts.