angular-new-app

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs running npm/npx to fetch and execute remote packages at runtime (e.g., npm install -g @angular/cli, npx ng new ..., npx ng add tailwindcss, npx ng mcp), which will retrieve code from the npm registry (https://registry.npmjs.org/) and thus executes external code required by the skill.