blast-radius

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill explicitly requires runtime fetching of repository content (e.g., via git-remote-urls like "github.com/acme/payments-api" and the GitHub API endpoint pattern "https://api.github.com/repos///contents/?ref=") to resolve snippets and synthesize findings, which injects remote source into the agent context and therefore directly controls the agent's prompts/analysis.