khe-svg

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The README's npx skills add HKTITAN/skills command is an instructed setup fetch of the skill's own installed material from an individual-owned GitHub repository, which is unofficial but canonical and not shown to be suspicious, so it is common/reputable unofficial and rates medium.