when-creating-skill-template-use-skill-builder

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill repeatedly runs the external npm package via commands like "npx claude-flow@alpha skill-run ..." which will fetch and execute remote package code at runtime (claude-flow@alpha) and therefore can directly control prompts/instructions and execute code.