keep

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly fetches GitHub issue data at runtime (via the gh CLI / scripts) and uses issue bodies/URLs such as https://github.com/myuser/taskmaster-api/issues/1234 to drive prompts, recommendations, and context, so remote GitHub content can directly control agent behavior.