self-review-guide

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly treats GitHub/GitLab PR/MR URLs as a "URL source" and at runtime runs git clone / git fetch against URLs like https:////.git (and PR/MR patterns such as https://///pull/ and https://///-/merge_requests/), then reads repository files to generate the guide, meaning fetched remote content directly influences the agent's outputs.