aidlc

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The installer script (scripts/aidlc_project.py) downloads and extracts the upstream v2 ZIP at runtime from https://github.com/awslabs/aidlc-workflows/archive/refs/heads/v2.zip and then copies distribution files (including agent hooks and AGENTS.md) into the project, so remote content can directly control agent prompts/configuration.