pp-pangolin

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's prerequisite instructs running remote installers that fetch and execute code at install time (e.g., "npx -y @mvanhorn/printing-press-library install pangolin --cli-only" and "go install github.com/mvanhorn/printing-press-library/library/developer-tools/pangolin/cmd/pangolin-pp-cli@latest"), so it depends on external content that runs code during setup.