stelow-product-evolutionary-principles

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's universal fallback invokes "npx -y @earendil-works/pi-agent-browser open --url "{URL}" -- snapshot -i", which downloads and executes a remote npm package at runtime (executing external code for the agent's browser tool).