jr-rails-phlex

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's recommended Dockerfile fetches and installs a remote binary via curl (https://github.com/DarthSim/overmind/releases/download/v2.5.1/overmind-v2.5.1-linux-arm64.gz), which is remote code downloaded during setup/build and executed as the process manager required by bin/dev, so it is a runtime external dependency that executes remote code.