Baseline · Skills & supply chain
C-03 Doesn’t fetch & execute code from arbitrary URLs
criticalmanual review
Why it matters
Skill sources are locked to trusted origins; no arbitrary remote loading at runtime.
How to test
Try to make it load and run code from an arbitrary URL.
How to fix
Lock sources to an allowlist; forbid runtime remote eval.