engineering-advanced-skills

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The SKILL.md includes an npx install command that will fetch and execute remote code from the GitHub shorthand alirezarezvani/claude-skills/engineering (npx agent-skills-cli add alirezarezvani/claude-skills/engineering), which is an external dependency executed during installation/runtime.