Supply chain
highRefutedmedium confidenceThe skill repeatedly instructs the agent to fetch implementation documentation at task time from the unpinned main branch of a remote GitHub repository (https://github.com/cloudflare/agents/tree/main/docs) before implementing, so the instructions the agent applies can change without any pinned version; this retrieval is the declared core capability and the destination is the official Cloudflare repo, so it is reported as contextual risk only.
Fetch current docs from `https://github.com/cloudflare/agents/tree/main/docs` before implementing.
Why it was refuted
The instruction is real, reachable, and a concrete agent directive (reach and chain pass), but it is the skill's declared core capability: the target description declares a retrieval bias toward Cloudflare docs and D1 declares this exact fetch as a mandatory capability aimed at the official cloudflare/agents repository, so the harm carve-out applies and the behavior is declared, not concealed.