yuv-design-system

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs runtime cloning and execution of the canonical repo (git clone https://github.com/hoodini/yuv-design-system.git and then running scripts/install-skill.sh / ensure-assets.sh), which fetches remote code and runs it as a required dependency, so this is a high-confidence runtime code-execution dependency.