pp-sendfox

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires installing and running remote code at runtime (via npx -y @mvanhorn/printing-press-library which fetches and executes an npm package, and via go install github.com/mvanhorn/printing-press-library/library/marketing/sendfox/cmd/sendfox-pp-cli@latest which fetches and builds code from GitHub), so the external content is fetched/executed at runtime and is a required dependency.