engineering-advanced-skills

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Quick Start includes the command "npx agent-skills-cli add alirezarezvani/claude-skills/engineering", which instructs npx to fetch and execute remote package code (alirezarezvani/claude-skills/engineering) at install/runtime and thus can directly run remote code that controls agent behavior.