update-claude

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The document instructs running "npx skills add Fandhe-AI/agent-cli-skills", which fetches and executes remote package code at runtime and is required by the skill to install skills that can change agent behavior, so this is an external runtime dependency that executes remote code.