plankton-code-quality

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). High-confidence: the Quick Start instructs git clone https://github.com/alexfazio/plankton.git and then to run Claude in that directory, which will load and execute the fetched .claude hook scripts (remote code that controls agent behavior and prompt-driven subprocess delegation).