stelow-product-coding-standards

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes runtime install commands that fetch and execute remote code (required by fallback tools), e.g. "git:github.com/cursor/plugins" and "git:github.com/PriNova/pi-agent-codebase-workflows", which are runtime dependencies that will download and run external code.