foam-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). I flagged the Docker image ghcr.io/kasperhonore/foamagent:latest (pulled and run at runtime) and the runtime npx install reference KasperHonore/Foam-Agent (npx will fetch and execute third‑party code) because both are fetched during setup and execute remote code that the skill depends on.