image-generation

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill tells users to run npx -y luxin-cli@latest (which fetches and executes remote code at runtime) and explicitly points to hosted contract endpoints such as https://api.luxin.sh and https://luxin.sh/skill.md that the CLI is expected to contact to control prompts/behavior.