peer-messaging

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's setup runs "npm install -g claude-peers-mcp" / "npx claude-peers-mcp", which fetches and executes remote code from the npm registry (claude-peers-mcp) to run a local broker that directly influences agent messaging/instructions, so this external dependency is used at runtime and can control prompts.