install-rho

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill explicitly runs runtime install commands that fetch and execute remote code (e.g., git clone https://github.com/mikeyobrien/rho.git and npm install -g @mariozechner/pi-coding-agent), so those external URLs provide code that will be executed and are required for the skill to function.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). This skill instructs installing system-wide packages (including commands that use sudo), installing global npm packages, cloning repositories into ~/.rho, and setting up a persistent daemon in tmux—actions that modify the host system state and may require elevated privileges, so it should be flagged.