platform-capability-search

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly requires executing a pinned npx install command that will fetch and run remote code at runtime: npx skills@1.5.20 add forcedotcom/sf-skills#1.38.0 --skill <same-name> --agent claude-code --yes, which is a runtime external dependency that executes remote code.