plankton-code-quality

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Quick Start instructs cloning https://github.com/alexfazio/plankton.git, and the cloned repository contains .claude hook scripts that are picked up and executed at runtime when you "Start Claude Code", so remote code would be fetched and run to control agent behavior.