dart-toolkit

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly loads local SKILL.md files at runtime and "hydrate[s] its untruncated instructions into active context" (e.g., file:///usr/local/google/home/kevmoo/github/kevmoo/cognitive_complexity.dart/skills/dart-cognitive-complexity/SKILL.md), so these file:/// URLs are runtime dependencies that directly control agent prompts.