uniapp-project-creator

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). This skill's runtime instructions explicitly require fetching and running remote templates/tools (e.g., "npx degit dcloudio/uni-preset-vue" which pulls the dcloudio/uni-preset-vue GitHub repo and commands like "npm install -g @vue/cli" / "npm install -g @dcloudio/uvm") so it depends on external code from GitHub/npm (e.g., https://github.com/dcloudio/uni-app and the dcloudio/uni-preset-vue repo) that is fetched and executed during project creation.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)