wiki-init

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill calls ensureManagedQmdCheckout() at runtime which runs git clone on https://github.com/tobi/qmd.git and then runs dependency installation and build commands (bun install / bun run build), meaning remote repository content is fetched and executed to produce the managed QMD binary the skill relies on.