mobile-apps-create

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the runtime to fetch and install child skills from external repositories which then “take over” instructions (e.g., npx --yes skills add forcedotcom/SalesforceMobileSDK-Templates installs code from https://github.com/forcedotcom/SalesforceMobileSDK-Templates that will control the agent's prompts and workflow), so this is a runtime external dependency that can directly control agent instructions.