protobuf

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill configuration and instructions cause the buf toolchain to fetch and run remote BSR modules/plugins at runtime (e.g., the dependency "buf.build/bufbuild/protovalidate" and remote plugin "buf.build/protocolbuffers/go" referenced in buf.yaml/buf.gen.yaml), which means external code/modules are fetched and executed during commands like buf dep update and buf generate.