pp-openalex

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires installing a remote CLI which fetches and executes remote code at runtime (e.g., go install github.com/mvanhorn/printing-press-library/library/other/openalex/cmd/openalex-pp-cli@latest and npx -y @mvanhorn/printing-press install openalex --cli-only), so these external sources are runtime dependencies that can execute remote code.