eval-driven-dev

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The setup script fetches updates using npx skills update referencing a remote GitHub repository (github/awesome-copilot), creating an external operational dependency with unverified upstream publisher provenance.