typo3-core-contributions

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs at runtime to fetch and install a remote git hook via SCP from your-username@review.typo3.org:hooks/commit-msg which will be saved into .git/hooks/commit-msg and executed by Git, so this external URL supplies remote code that the workflow relies on.