walkthrough-script-agent

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). An operational dependency exists because the bash command invokes an external script via the variable ${CLAUDE_PLUGIN_ROOT}/skills/app-demo-agent/scripts/extract_frames.py, which acts as executable code.