gh-version-control-workflow

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's scripts call the host bridge URL (default http://host.internal:8765 via PARALLELS_SYNC_GITOPS_BASE_URL) at runtime (curl to <gitops_base>/v1/ops/...) to instruct a remote gitops service to perform operations, so fetched content directly causes remote code/operations to execute and is a required runtime fallback.