startup-workflow-orchestrator

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly invokes and may install/execute external runtime skills (e.g., "skills.sh" via npx skills find <keyword> and primary/fallback skills "stablyai/orca@computer-use", "midscene-skills@computer-automation", "codex-skills@gemini-computer-use"), which are required at runtime to perform automation and thus would fetch and run external code.