frame-review

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill's "Read next" routing instructs the agent to read linked-source files from the Quegenx/agent-skills GitHub repository when they are not installed locally, and those measured-review files then govern review checks; the publisher is an unofficial organization-owned repository on a mutable main ref, so this is a common/reputable unofficial operational dependency (medium).