agent-dev-backend-api

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill executes npx claude-flow@alpha commands during pre and post execution hooks, relying on an unverified external npm package identifier.