everything-claude-code-harness

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The repository https://github.com/affaan-m/everything-claude-code is fetched at install time (git clone and/or plugin install + ./install.sh) and contains agent prompts/skills and executable install scripts that would directly control agent instructions and run code, so it is a required runtime dependency that can change agent behavior.