claude-collaboration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs cloning/pulling central git repositories (e.g., git@github.com:team/claude-metadata.git and git@github.com:your-org/claude-team-skills.git), which fetch SKILL.md files that are loaded into Claude's session context and thus directly control the agent's prompts/instructions as a required external dependency.