hypercerts

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs runtime installation using npx which fetches and executes remote skill packages (and accepts direct-directory GitHub URLs such as https://github.com/hypercerts-org/ePDS/tree/main/.agents/skills/epds-login), so external repository content would be retrieved at runtime and can directly control agent instructions.