code-quality-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires running compose-agentsmd which uses the agent-ruleset source "github:metyatech/agent-rules@HEAD" (e.g., Source: github:metyatech/agent-rules@HEAD/rules/global/agent-rules-composition.md) at session start to fetch/regenerate AGENTS.md, so remote GitHub content is fetched at runtime and directly controls agent rules/instructions.