helm-patterns

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains CI steps that fetch and install remote executables/plugins which will execute code at runtime (e.g., "helm plugin install https://github.com/helm-unittest/helm-unittest", "https://github.com/helm/chart-testing/releases/download/v3.11.0/chart-testing_3.11.0_linux_amd64.tar.gz", "https://github.com/databus23/helm-diff", "https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64", and "https://github.com/helmfile/helmfile/releases/download/v${HELMFILE_VERSION}/helmfile_${HELMFILE_VERSION}_linux_amd64.tar.gz"), which are runtime fetches of remote code the CI relies on.