stelow-product-business-models

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill text includes runtime install/invoke commands that fetch and execute remote packages (e.g., the npx invocation that downloads/executes @earendil-works/pi-agent-browser and the pi install git:github.com/... lines), which are runtime external dependencies that execute remote code (agent_browser.md: lines 17-19; codequality-review.md: lines 30-33; references/cli-tools/safe-change.md: lines 9-16).