fw-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill spawns shell Tasks that at runtime fetch and install remote tarballs (e.g., npm install -g https://cdn.freshdev.io/fdk/latest-v24.tgz and https://cdn.freshdev.io/fdk/vX.Y.Z.tgz) and even instructs a curl | bash for nvm (https://raw.githubusercontent.com/...), so external content is fetched during runtime and directly executes/controls installation behavior.