gitnexus-debugging

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly performs runtime reads like "READ gitnexus://repo/{name}/process/{name}" (e.g., gitnexus://repo/my-app/process/CheckoutFlow), which fetches repository/process content into the agent context and thus can directly control prompts/decisions (and the guidance to run "npx gitnexus analyze" can fetch-and-execute remote code when used), so this is a runtime external dependency that influences agent behavior.