android-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains explicit install commands that fetch and execute remote scripts at runtime (e.g., curl -fsSL https://dl.google.com/android/cli/latest/linux_x86_64/install.sh | bash and the equivalent darwin_arm64, darwin_x86_64 install.sh and https://dl.google.com/android/cli/latest/windows_x86_64/install.cmd which is downloaded and executed), so the skill can run remote code and depends on that external content.