pp-shopping

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's setup instructions instruct installing and running remote Go packages that fetch and execute code (required to use the skill), specifically via "go install github.com/mvanhorn/printing-press-library/library/commerce/shopping/cmd/shopping-pp-cli@latest" and "go install github.com/mvanhorn/printing-press-library/library/commerce/shopping/cmd/shopping-pp-mcp@latest", which are runtime external dependencies that execute remote code and are required for the skill.