uxui-principles

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The workflow explicitly instructs running the remote install command "npx skills add uxuiprinciples/agent-skills" (and references the upstream repo https://github.com/sickn33/antigravity-awesome-skills), which will fetch and execute external package code at runtime and therefore can directly control agent prompts/instructions.