stream

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The peers manifest contains runtime install commands (e.g., "npx skills add GetStream/agent-skills --s stream-cli -y") that the router will run to fetch and install peer skills—this fetches and executes remote code and is required for the skill pack to function, so it can directly change agent behavior at runtime.