triclaude

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill runs "git pull" at runtime against the GitHub repo yousufjoyian/triclaude (e.g. https://github.com/yousufjoyian/triclaude), which will fetch remote code that is later built and launched locally, so it can introduce and execute external code.