ui-skills

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The README instructs adding the repository "https://github.com/michaelshimeles/ui-agent-constraints" as a skill source (both in the JSON and CLI examples), which would be fetched by the agent/installer at install/runtime and would directly supply the skill's prompts/instructions—making it a runtime external dependency that controls agent behavior.