publish-artifacts

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). During setup/init the skill runs commands that fetch-and-execute remote code — e.g. "npx wrangler deploy" (which pulls the wrangler package from the npm registry) and installs the Cloudflare agent plugin via "claude plugin install cloudflare@cloudflare" that connects to the Code Mode MCP at https://mcp.cloudflare.com/mcp — these are runtime-fetch-and-execute external dependencies required for the skill to manage Access and deploy the Worker.