iii-directory

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill exposes runtime download functions that fetch skill/prompt markdown from the public registry (https://api.workers.iii.dev via directory::registry::workers::* / directory::skills::download_from_registry) and from GitHub repos (directory::skills::download_from_repo / git:// or https://github.com/... URLs), and those fetched markdown/prompt files are written to disk and directly control agent prompts/instructions.