nix-flake-parts

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's examples declare and invoke remote flake inputs (e.g., "github:hercules-ci/flake-parts" and "github:you/your-tool"), which are fetched during flake evaluation and cause remote Nix code (inputs.flake-parts.lib.mkFlake, flakeModules, etc.) to be executed and influence the agent's behavior, so these are runtime external dependencies that execute remote code.