living-documentation-publisher

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The CI workflow invokes the external GitHub Action "peaceiris/actions-gh-pages@v4", which the runner fetches from GitHub and executes at runtime to publish the site (references/ci-publish.md), so this is a required runtime dependency that executes remote code.