hmos-arkts-syntax-checker

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires the CodeGenie MCP server which the docs instruct to install/start via an npx command that will fetch and execute the @deveco-codegenie/mcp@beta package from the npm registry (e.g., --registry=https://registry.npmjs.org), so remote code is fetched/executed and is a required runtime dependency.