init-claude

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill executes npx skills add Fandhe-AI/agent-cli-skills fetching code from the Fandhe-AI/agent-cli-skills repository as an operational dependency, but Fandhe-AI is an unofficial, personal-owned third-party repository without strong first-party verification, making it a common/reputable unofficial operational dependency.