dev-loop-changelog-generator

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes CI/runtime steps that fetch and execute third-party code (e.g., GitHub Actions and package installs) such as uses: orhun/git-cliff-action@v3, uses: softprops/action-gh-release@v1, uses: googleapis/release-please-action@v4 and cargo install git-cliff which will retrieve and run remote code during workflow/skill runtime.