pp-cal-com

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill requires installing and running remote code at runtime via "npx -y @mvanhorn/printing-press install cal-com --cli-only" and "go install github.com/mvanhorn/printing-press-library/library/productivity/cal-com/cmd/cal-com-pp-cli@latest", which fetch and execute external content and are required for the skill to run.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill exposes explicit payment-related commands. It includes a "stripe" command group (stripe check, stripe redirect, stripe save) tied to Stripe integration and a "credits charge" command that explicitly charges credits ("Charge credits for a completed AI agent interaction" with idempotency). These are specific financial/payment operations (payment gateway and charge capability), so this skill grants direct financial execution authority.