running-github-actions-efficiently

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The workflow curl commands download and install prebuilt binaries that are executed at runtime (swiftlint: https://github.com/realm/SwiftLint/releases/download/0.65.0/swiftlint_linux_amd64.zip and swiftformat: https://github.com/nicklockwood/SwiftFormat/releases/download/0.62.1/swiftformat_linux.zip), so these URLs fetch remote executables used during the job.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill's example workflow explicitly runs "sudo install" to place binaries into /usr/local/bin (and recommends system-level "brew install"), which requests elevated privileges and modifies system-wide files.