setup-browser-cookies

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The setup step may run a shell command that downloads and executes the bun installer from https://bun.sh/install (curl -fsSL "https://bun.sh/install" -o "$tmpfile" ... bash "$tmpfile"), which is a runtime fetch of remote code that would be executed as part of the skill setup.