alloydb-omni-data

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The scripts spawn npx to run "@toolbox-sdk/server@1.1.0" (invoked as "npx --yes @toolbox-sdk/server@1.1.0"), which fetches and executes remote npm package code at runtime (see package page https://www.npmjs.com/package/@toolbox-sdk/server), so the skill relies on externally fetched code that is executed.