setup-tooluniverse

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly tells the agent to ask the user for API keys and to insert those keys into config/env blocks and shell commands (e.g., export/echo and JSON env entries), which requires the LLM to receive and emit secret values verbatim.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly runs remote install/code-fetch commands at runtime—e.g., "curl -LsSf https://astral.sh/uv/install.sh | sh" (downloads and executes a remote install script) and "git clone https://github.com/mims-harvard/ToolUniverse.git …" / "npx skills add mims-harvard/ToolUniverse --all" (fetches and installs skill code that the agent will load and execute)—so external content is fetched and executed and is required for the skill to function.