ai-scanner-garak

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes curl on raw GitHub URLs during setup to fetch and run an install script and configuration files, constituting an unverified external code/configuration dependency from a third-party repository.