eventschemaset-consumption-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill mandates a runtime update check that runs "git fetch origin main --quiet && git show origin/main:package.json" to retrieve remote package.json and then uses that content to decide changelog/update instructions, so remote-fetched content directly controls the agent's behavior.