cli-e2e-testing

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes CI/runtime commands that download and install CLI artifacts from GitHub (e.g., gh api --paginate "repos/microsoft/aspire/actions/runs/$RUN_ID/artifacts" and gh run download $RUN_ID which map to https://api.github.com/repos/microsoft/aspire/actions/runs/$RUN_ID/artifacts and https://github.com/microsoft/aspire/actions/runs/$RUN_ID), and the docs/legacy helpers explicitly state they "download and install CLI from PR artifacts", which is a runtime fetch that can execute remote code inside the test Docker environment.