pp-wahoo

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime/install instructions explicitly call out fetching and executing remote code via "go install github.com/mvanhorn/printing-press-library/library/devices/wahoo/cmd/wahoo-pp-cli@latest" (and the mcp variant), which the skill relies on as a required CLI dependency.