supabase

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to fetch external documentation at runtime (e.g., "fetch the Supabase product security index: https://supabase.com/docs/guides/security/product-security.md" and "Fetch docs pages as markdown" SKILL.md:37,77), which means remote content can be pulled into and directly control the agent's instructions.