taiwanmd-node
把這台機器變成 Taiwan.md 的分靈節點（contributor node）——每天醒來一次， 從既有工單源接一件事做完（翻譯缺口 / 斷鏈 / 格式 / metadata），成果用 PR 回主庫，merge 永遠留給人類。也負責第一次的節點設定。 TRIGGER when: user says "當 Taiwan.md 節點", "分靈節點", "taiwanmd node", "接一件 Taiwan.md 的工單", or a taiwanmd-node scheduled task fires. ARGS: --dry-run（只印可接工單，不開 PR 不改檔）/ --setup（只做第一次設定）
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill instructs the agent to fetch and strictly execute the canonical pipeline from the remote repository (https://github.com/frank890417/taiwan-md/blob/main/docs/pipelines/CONTRIBUTOR-NODE-PIPELINE.md), so runtime cloning/reading of that URL directly controls the agent's prompts/workflow.
- Repository
- frank890417/taiwan-md
- Commit
17b6164
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.