devcontainer-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The generated devcontainer references external devcontainer features (e.g., "ghcr.io/devcontainers/features/rust:1" and "ghcr.io/devcontainers/features/go:1") which are fetched at container build/runtime and can include and execute remote scripts, so the skill relies on remote content that executes code.