moonrepo

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The CI example includes GitHub Actions steps "actions/checkout@v4" and "moonrepo/setup-toolchain@v0", which are fetched and executed at workflow runtime and thus constitute external runtime code execution used by the skill.