eas-workflows

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly fetches external resources at runtime that are required and used to drive validation and to derive answers—most notably https://api.expo.dev/v2/workflows/schema (fetched by scripts/validate.js) and the two raw GitHub docs—which means those URLs can directly influence the agent's behavior and outputs.