fiction-agent-update-manager

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly targets and may pull updates from the remote repository https://github.com/lensetek/Fiction-book-agent-skills (SKILL.md) and instructs executing git pull origin main at runtime, so remote content could change agent prompts or introduce executable code.