web-verify-patcher

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's browser-acquisition guidance explicitly says it may run runtime installation commands including "git clone " followed by "python -m pip install -e .", which would fetch remote code and install/execute it (flagging ).