package-clickstack-blue

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script uses uv with inline metadata declaring git dependencies from GitHub (getcolors), which fetch and execute remote code at runtime, making it a common unofficial operational dependency.