bootstrap-ios

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The helper script is explicitly run at runtime to fetch GitHub-hosted skill packs (e.g., https://github.com/twostraws/SwiftUI-Agent-Skill/tree/main/swiftui-pro) via npx, and those remote SKILL.md/reference files can directly control agent prompts/instructions, so these URLs are runtime dependencies that influence agent behavior.