swc-docs

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs cloning and then running a script from a remote Git repository (git clone https://github.com/swc-project/swc.git followed by running ~/projects/swc/crates/swc_ecma_minifier/scripts/next/add-test.sh), which fetches remote code and executes it, so I flagged https://github.com/swc-project/swc.git.