gordon

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The install step runs remote shell code (curl -fsSL https://gordon.bnema.dev/install | bash), which fetches and executes external code during setup and is required for using the skill, so it directly executes remote code at runtime.