cometchat-native-calls

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires installing a Cloudsmith-hosted tarball at runtime via npm (used in install commands and noted as mandatory for the WebRTC layer), which fetches and installs remote executable package code: https://dl.cloudsmith.io/public/cometchat/cometchat/raw/files/cometchat-calls-lib-webrtc-346a46ff.tgz