skeleton-dev

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires fetching runtime docs (https://www.skeleton.dev/llms.txt and the framework-specific https://www.skeleton.dev/llms-svelte.txt / https://www.skeleton.dev/llms-react.txt) via WebFetch and uses that fetched content to directly guide prompts/instructions for writing/reviewing code, making these URLs required runtime dependencies that control agent behavior.