harness-evolve

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill shells to and runs a remote npm package at runtime via "npx -y @metaharness/darwin@~0.8.0 metaharness-darwin evolve …", which fetches and executes remote code that performs the evolution/mutation logic controlling agent surfaces.