wix-vibe-headless

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime install/fetch commands that download and extract remote skill bundles (curl "https://www.wix.com/skills/${s}.tgz" / "https://www.wix.com/skills/$s.tgz") and an explicit loader instruction to fetch external prompt instructions (https://www.wix.com/skills/vibe-headless/platforms/base44.md), which fetch remote code/content at runtime that directly controls agent instructions and is required for the skill to run.