tooluniverse-codex-plugin

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The plugin/agent auto-starts an MCP server that downloads and executes the "tooluniverse" package at runtime (referenced on PyPI: https://pypi.org/project/tooluniverse/ and via the Git marketplace https://github.com/mims-harvard/ToolUniverse.git), and the docs also suggest running a remote installer (curl -LsSf https://astral.sh/uv/install.sh | sh), so remote code is fetched and executed during runtime.