pp-ufo

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires installing and running a local CLI which the doc explicitly instructs agents/users to fetch-and-run (e.g., via npx -y @mvanhorn/printing-press install ufo-goat --cli-only or by fetching remote Go code with go install github.com/mvanhorn/printing-press-library/library/other/ufo-goat/cmd/ufo-goat-pp-cli@latest), which downloads and executes external code at install/runtime and is a required dependency for the skill.