cleanup-cycles

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill invokes package-manager commands at runtime that fetch and run remote code (e.g., go install github.com/loov/goda@latest, pipx run pycycle / pipx run import-linter, and bunx/npx madge), so external content would be fetched and executed during detection.