skill-installer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The installer fetches and runs remote content at runtime from these URLs—git-cloning or npx-adding whole skill repositories (https://github.com/obra/superpowers.git, https://github.com/claude-office-skills/skills.git, https://github.com/github/awesome-copilot, https://github.com/microsoft/playwright-cli) and even piping a remote install script to bash (https://aka.ms/InstallAzureCLIDeb), which installs/executes remote code and supplies skill definitions that can control agent prompts.