sdd

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes installation/troubleshooting commands that fetch and install remote code (git+https://github.com/github/spec-kit.git for the specify-cli and https://github.com/git-ecosystem/git-credential-manager/releases/download/v2.6.1/gcm-linux_amd64.2.6.1.deb via wget), which will execute remote-sourced code as part of setup and are relied on for the skill to function.