pdf-editor-compdf

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly downloads and installs a required CLI binary from https://download.compdf.com/skills/winCLI/win.zip and https://download.compdf.com/skills/macCLI/mac.zip at first-run (and performs a runtime license POST to https://wms.compdf.com/api/license/skillsTrial), which means remote code is fetched and executed as a required dependency.