vibehost-haunted-farm

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The instruction set in SKILL.md (and supporting files like deploy.md) directs the agent to download and execute an installation script from https://vibehost.com/install.sh using curl at runtime if the CLI is missing, establishing an unverifiable runtime external dependency from a third-party domain, which is classified as high risk.