ss-coding

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly states it will "run ss-plan on the link" for a "link to an external doc" (used at runtime), so an external URL such as https://wiki.example.com/requirements/user-payment (example at SKILL.md:483) would be fetched and its content used to generate plans/prompts that drive subagent instructions.