github-actions-workflow-builder

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The workflows include external GitHub Actions that are fetched and executed at runtime (for example uses: actions/checkout@v3 → https://github.com/actions/checkout), so the skill depends on remote repositories whose code runs during workflow execution.