xcode-project-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's Package.swift declares a runtime dependency on https://github.com/tuist/XcodeProj.git which Swift Package Manager will fetch/build when you run the included Swift tool (swift run), meaning remote code from that URL will be executed as part of the skill's runtime.