omu

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill installs external plugins and packages from GitHub (Yeachan-Heo/oh-my-claudecode, backnotprop/plannotator) and an external script URL (https://plannotator.ai/install.sh) without cryptographic digests or immutable identification during its setup scripts, constituting weak external operational dependencies.