pp-cpsc-recalls

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's installation instructions invoke go install with remote module paths (github.com/mvanhorn/printing-press-library/library/other/cpsc-recalls/cmd/cpsc-recalls-pp-cli@latest and github.com/mvanhorn/printing-press-library/library/other/cpsc-recalls/cmd/cpsc-recalls-pp-mcp@latest), which fetch and build remote code during setup that the skill requires at runtime.