human-ai-system-builder

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). AGENTS.md mandates running compose-agentsmd (including via npx) at session start and agent-ruleset.json / AGENTS.md reference github:metyatech/agent-rules (github:metyatech/agent-rules and github:metyatech/agent-rules@HEAD/rules/domains/skill/repository.md), which are fetched at runtime to regenerate rules that directly control agent instructions, so the remote git source is a runtime dependency controlling prompts.