website-content-editor

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runs gh api/gh repo clone against the timescale/timescale-website repository (https://github.com/timescale/timescale-website) at runtime and explicitly instructs cloning and running npm install/npm run build, which fetches remote code and executes it—meeting the criteria for a runtime dependency that executes remote code.