fallow

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The CLI supports fetching remote "extends" configs at runtime (see FALLOW_EXTENDS_TIMEOUT_SECS) and the docs show an example extends URL (https://example.com/shared-config.json) which, if present, would be fetched and could change the tool's behavior/configuration at runtime.