expo-skill-eval

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The runtime scripts invoke bunx/npm to fetch-and-run packages (e.g. bunx create-expo-app, bunx expo install, and bunx playwright install chromium) which will download and execute code from the npm registry (https://registry.npmjs.org) and Playwright's browser download hosts at runtime, so remote content is fetched-and-executed as a required dependency.