pp-fred

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's install instructions run "go install github.com/mvanhorn/printing-press-library/library/other/fred/cmd/fred-pp-cli@latest" and "go install github.com/mvanhorn/printing-press-library/library/other/fred/cmd/fred-pp-mcp@latest", which fetch and build remote code that becomes the required CLI binaries executed by the agent, so these external repositories can directly control agent-executed code.