findy-hackathon

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs running setup commands that fetch and install remote skill repositories (e.g., npx degit / npm run setup:skills), and the README explicitly references the GitHub starter repo https://github.com/yusukebe/findy-campus-hackathon-02 and the Cloudflare skills repo https://github.com/cloudflare/skills which will be installed into .agents/.claude and can contain agent prompts/instructions executed at runtime.