security-scan

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires installing/running the third‑party tool via npx (npx ecc-agentshield) which fetches and executes the ecc-agentshield package from npm (https://www.npmjs.com/package/ecc-agentshield) / GitHub (https://github.com/affaan-m/agentshield), and that tool's "Opus" pipeline runs remote agent prompts and executes code at runtime, so external content both executes and controls prompts.