business-growth-skills

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The Quick Start includes an npx install command ("npx agent-skills-cli add alirezarezvani/claude-skills/business-growth") which causes npx to fetch and execute a remote package at install/runtime, meaning remote code would be run and relied upon to load the skill.