deploy-release-test

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill validates and uses the runtime package URL https://vercel-packages.vercel.app/next/commits//next (it polls the URL and passes it as nextVersion when dispatching the workflow), and that fetched tarball will supply and run remote code in the triggered CI workflow.