microsoft-ai-engineer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly tells platforms to "Read [URL] and install as skill" where [URL] is https://raw.githubusercontent.com/theneoai/awesome-skills/main/skills/enterprise/microsoft-ai/microsoft-ai-engineer/SKILL.md — fetching that raw SKILL.md at runtime would inject the system prompt/content that directly controls the agent's instructions.