setup-immune-compass-remote-tool

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill downloads requirements and installation scripts from connect.aiscientist.tools and raw.githubusercontent.com, and installs an unverified wheel from connect.aiscientist.tools/downloads/tuplatform_connect-0.3.0-py3-none-any.whl with a hardcoded SHA-256 digest from an arbitrary third-party domain, representing an unknown publisher operational dependency.