rust-node-bootstrap

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill contains instructions and code templates to bootstrap a Rust/Node.js project, including commands to install companion skills from an external GitHub repository (onsager-ai/dev-skills) via npx skills add, which constitutes an unverifiable external runtime dependency under weak/unknown provenance.