commerce-app-init

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs running npx to fetch-and-execute remote npm packages at runtime (npx @adobe/aio-commerce-lib-app init and npx skills add adobe/skills --skill appbuilder-project-init -y), which downloads and runs external code the skill relies on.