firebase-basics

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL explicitly instructs a runtime install that fetches and installs remote agent code via the URL https://github.com/firebase/agent-skills (e.g., "gemini extensions install https://github.com/firebase/agent-skills"), which would download and install code that controls agent skills/prompts and is presented as a required dependency for full functionality.