pp-midjourney

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes explicit install commands that fetch and install remote Go modules (e.g., github.com/mvanhorn/printing-press-library/library/ai/midjourney/cmd/midjourney-pp-cli@latest and .../midjourney-pp-mcp@latest), which would execute remote code as a required dependency if the agent runs those commands at runtime.