setup-scvelo-remote-tool

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow described in SKILL.md sets up and runs an MCP/remote tool locally (and optionally via ToolUniverse Connect) and only consumes caller-provided JSON arguments for a specific operation (e.g., run_scvelo_velocity), without reading outsider-authored free text from inboxes/feeds/issue text by default.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill includes a runtime pip install that fetches and installs remote code from https://connect.aiscientist.tools/downloads/tuplatform_connect-0.3.0-py3-none-any.whl#sha256=3fad5eee5ecf7887a693d93ccd1aa112dc0955617a885d1fc3daded0030f9ae0, which will execute code on install and is presented as a required relay SDK for the Connect workflow.