matematic-workspace-backup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the operator to download and install the gogcli binary from https://github.com/steipete/gogcli and then run that binary (gog backup ...), so this external URL is used at runtime to fetch and execute remote code required by the skill.