stelow-product-multi-method-market-analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill docs include explicit runtime install/execute commands that fetch and run remote code (e.g., "npx -y @earendil-works/pi-agent-browser open --url "{URL}" -- snapshot -i" and "pi install git:github.com/cursor/plugins" / "pi install git:github.com/PriNova/pi-agent-codebase-workflows"), which will download and execute external packages at runtime.