typesense

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The installer script invokes docker run "typesense/typesense:…" which pulls and executes a remote Docker image (see https://hub.docker.com/r/typesense/typesense), and the plugin installation examples use npx to fetch/execute https://github.com/akillness/jeo-skills — both are runtime fetches that execute remote code.