officecli-academic-paper

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The setup instructions provide curl and irm commands that download and execute an installation script from https://d.officecli.ai/install.sh and https://d.officecli.ai/install.ps1, which constitute unverifiable runtime external dependencies with weak provenance.