guided-gui-design

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The repository runs compose-agentsmd (e.g., in .husky/pre-commit) which at runtime fetches the external rules source github:metyatech/agent-rules@HEAD/rules/domains/skill/repository.md (also referenced in agent-ruleset.json as github:metyatech/agent-rules), and that fetched content regenerates AGENTS.md and directly controls the agent's instruction rules.