spatial-domain-detection

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes pixi add --pypi "utag @ git+https://github.com/ElementoLab/utag.git@main", installing an arbitrary personal/lab GitHub repository as an operational dependency, making it a weak/unknown source (high).