pake-app-builder

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL.md error-handling explicitly recommends running a curl | sh install command that fetches and executes remote code from https://sh.rustup.rs at runtime, which constitutes direct remote code execution.