flint-theme-author

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to "Read these before authoring" and to "Check every key and enum against types.ts", so it requires fetching and relying on the external references (e.g. https://github.com/microsoft/flint-chart/blob/main/packages/flint-js/src/core/theme/types.ts and the other GitHub docs/presets links) at runtime which directly control the agent's output.