custom-plugin-flutter-skill-devops

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The GitHub Actions workflow uses external actions that are fetched and executed at runtime (actions/checkout@v3 -> https://github.com/actions/checkout and subosito/flutter-action@v2 -> https://github.com/subosito/flutter-action), so remote code is pulled in and required for the job to run.