prisma-next-extension-upgrade

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs running "pnpm dlx skills add prisma/prisma-next/skills/extension-author --all" (the external repo prisma/prisma-next/skills/extension-author) at runtime to fetch the up-to-date skill package that supplies the agent's per-transition instructions, so remote content would directly control prompts/instructions and is treated as a required dependency.