turborepo-vercel-monorepo

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The setup step at SKILL.md line 99 instructs installing the sibling skill xcode-vercel-release-tracks from the GitHub repository stealth-factory/private-skills, and that installed material governs later release behavior; the publisher is the same individual/project that authored this skill and is not an established recognized vendor, so it is an attributable unofficial source and the tier is medium.