trim-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill documentation references the npm package @trimjs/trim-cli@0.1.1 and instructs users/agents to execute npm install -g @trimjs/trim-cli@0.1.1 or npx -y @trimjs/trim-cli@0.1.1 at runtime to install and run the CLI; this constitutes an external runtime dependency on an npm registry package without strong/official first-party provenance established within the repository itself (classified as medium tier).