brandkit-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.95). The skill installs remote packages/skills at runtime (e.g., via "npx skills add cursor/plugins", "npx skills add mattpocock/skills", "npx skills add vercel-labs/agent-skills", "npx skills add coreyhaines31/marketingskills", "npx skills add higgsfield-ai/skills" and "npm i -g @higgsfield/cli"), which fetches and installs remote code that will execute in the environment and can directly control agent behavior.