loom-plan-execution

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs runtime package-channel acquisition from NuGet (e.g. https://www.nuget.org/api/v2/package/Techne.Loom.AgentOrchestrator/0.2.151 and https://www.nuget.org/api/v2/package/Techne.Loom.AgentOrchestrator/0.2.148-beta), which are fetched at runtime as .nupkg bundles that contain ao.dll and related assemblies that the skill will execute (dotnet ao.dll), and those downloads are required for operation.