link-checker

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The GitHub Actions workflow and CI snippets reference and fetch remote action/image code (actions/checkout@v4, ruzickap/action-my-broken-link-checker@v2, lycheeverse/lychee-action@v1.8.0, lycheeverse/lychee:latest) which are executed at runtime in CI, so they are runtime external dependencies that execute remote code.