lark-apps

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to run git clone on the repository URL returned by +git-credential-init / +init (git clone <repository_url>), then read repository files such as .agents/skills/plugin-guide/SKILL.md and run npm install / npm run dev — i.e., remote repository content is fetched at runtime and can both control agent behavior and result in executing code.