mingjingzhishui

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The INSTALL.md includes an npx install command ("npx skills add 15810879921-coder/oneos-pm-skills --skill mingjingzhishui ...") and an install page URL (https://15810879921-coder.github.io/oneos-pm-skills/) which fetch and execute remote code to install skills that directly control agent behavior/prompts, so this is a high-confidence runtime external dependency.