package-clickstack-red

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The script fetches a private GitHub repository reference (github:getcolors/clickstack#...) at runtime via Bun install without established official vendor provenance, constituting an unverifiable runtime external dependency tier.