setup-browser-cookies

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill fetches a dynamic installation script from https://bun.sh/install and executes it via bash with only a hardcoded checksum validation, which constitutes an unverifiable runtime external dependency from a third-party domain under the weak/unknown/suspicious provenance rules.