pp-roadside-america

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). This skill includes install-time commands that fetch and run remote Go modules (go install github.com/mvanhorn/printing-press-library/library/travel/roadside-america/cmd/roadside-america-pp-cli@latest and go install github.com/mvanhorn/printing-press-library/library/travel/roadside-america/cmd/roadside-america-pp-mcp@latest), which execute remote code during setup/installation if performed at runtime.