framevideo-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The workflow includes runtime commands that fetch and install remote AI skills/models (e.g., "npx skills add chanjing-ai/framevideo --all" which pulls the chanjing-ai/framevideo package) — these fetched skills/models are installed and used at runtime and can execute code or directly control agent prompts.