clerk-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly uses WebFetch at runtime to fetch the official quickstart (e.g. https://clerk.com/docs/{framework}/getting-started/quickstart — e.g. https://clerk.com/docs/nextjs/getting-started/quickstart) and directs the agent to "Extract the complete setup instructions..." so the remote document would directly control the agent's prompts/instructions.