15-blue-team-defense

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill contains explicit URLs for downloading external executables and configurations (Sysmon and Sysnews/SwiftOnSecurity) during setup or runtime execution, satisfying the operational dependency gate under weak/unknown or third-party provenance.