claude-code-migration-kit

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the user to git clone https://github.com/anthropics/code-migration-kit-with-claude-code which fetches the repository containing prompts (prompts/.md) and executable scripts that the workflow runs (e.g., migration-kit/scripts/), so remote content would directly control agent prompts and execute code at runtime.