new-project

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill clones the external GitHub template "https://github.com/Mark-Life/netxjs-monorepo" at runtime via gh repo create --template ... --clone, which fetches remote project code that is then installed and run (bun install / bun run upgrade), so remote content can execute code in the runtime environment.