yanchufasui

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The INSTALL.md contains npx install commands that fetch and run remote package code (15810879921-coder/oneos-pm-skills) and points to the external install page https://15810879921-coder.github.io/oneos-pm-skills/, which are runtime external dependencies that download and execute code required to install the Skill.