p-video-avatar

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The setup instruction at line 7 (npx skills add belt-sh/cli) is an instructed install of skill material from a GitHub-style repository locator, and belt-sh is attributable to an identified organization that appears to be the CLI's publisher, but that first-party status is not independently authenticated, so it is common/reputable unofficial and rated medium.