pp-immich

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes explicit install commands that fetch and execute remote Go modules required for runtime (e.g., "go install github.com/mvanhorn/printing-press-library/library/media-and-entertainment/immich/cmd/immich-pp-cli@latest" and "go install github.com/mvanhorn/printing-press-library/library/media-and-entertainment/immich/cmd/immich-pp-mcp@latest"), so these external module URLs are runtime-installable code that the skill relies on.