huawei-cloud-find-skills

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill contains setup/runtime scripts (e.g., ensure_cli.sh, install_cli.sh) that download and install skill-quality-cli from an untrusted third-party or arbitrary storage URL (obs-skills-repository.obs.cn-north-4.myhuaweicloud.com), which constitutes a weak/unknown/suspicious operational dependency.