setup-golangci-lint

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a runtime install command that pipes a script from https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh into sh (curl ... | sh), which fetches and executes remote code as a required installation step (also used in CI), so it directly executes external code at runtime.