gitnexus

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime commands that fetch and execute remote npm packages (e.g., "npx -y gitnexus@latest mcp" and "npm install -g gitnexus"), which will download and run external code that provides MCP tools that directly control agent tool behavior—so the npx/npm fetch is a runtime external dependency executing remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to auto-install and configure software system-wide (global npm install), write/overwrite editor and hook configuration files, and even suggests using sudo if global install fails, so it actively modifies the host environment and encourages privilege escalation.