audit-tests

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill's GitHub audit flow explicitly runs git clone at runtime (git clone https://github.com/USER/REPO.git /tmp/audit-REPO), which fetches external repository code that the skill then inspects and may execute (run tests/tools) — this is a runtime fetch of remote code that can result in executing that code.