helix-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly pulls and runs a remote container image at runtime (ghcr.io/helixdb/enterprise-dev:latest used by helix start) and also documents an install command that fetches and executes a remote script (curl -sSL "https://install.helix-db.com" | bash), both of which fetch external code that is executed and are required for the CLI workflows.