run-smoke-tests

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill uses @vscode/test-cli which at runtime downloads and executes a standalone VS Code binary (fetched from Microsoft's update server, e.g. https://update.code.visualstudio.com/), so it relies on an external download that executes remote code.