expo-cicd-workflows

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill fetches the live schema at runtime from https://api.expo.dev/v2/workflows/schema (used in scripts/validate.js and referenced in SKILL.md) and uses that fetched content as the authoritative source to validate workflows and to derive answers, meaning the remote document directly controls the agent's outputs.