visual-qa

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's Web capture fallback explicitly instructs installing and running agent-browser (bun add -g agent-browser && agent-browser install), which fetches and executes remote code from https://github.com/vercel-labs/agent-browser and is used at runtime to perform screenshots, so it is a runtime external dependency that executes remote code.