create-agentic-workflow

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's Implementation Notes state that CI/CD Official-format agents require running "gh aw compile" and installing the GitHub extension via "gh extension install github/gh-aw" (repo: github/gh-aw), which fetches and executes remote extension code at runtime and is a required dependency for that agent mode.