pp-fred

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references external Go package repositories (github.com/mvanhorn/printing-press-library/...) and an npm package (@mvanhorn/printing-press-library) used during runtime setup/installation instructions to fetch and install operational binaries (fred-pp-cli, fred-pp-mcp), but personal GitHub repositories and arbitrary npm packages represent an unverifiable unofficial source under the dependency gate, making it a high-tier runtime external dependency.