ai-image-generation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill's setup instruction npx skills add belt-sh/cli (line 7) fetches installable skill material from a GitHub repository whose ownership as the first-party publisher is not established, so this unverified inbound dependency is weak/unknown and rates high, while the other inference-sh sources and belt app run calls are either lower-trust-relevant documentation or outbound job invocations.