my-skills-distribute

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes npx skills@1.7.0 add hu3rror/my-skills which fetches and runs external code from a personal GitHub repository (hu3rror/my-skills) via a package runner, presenting a weak unknown operational dependency.