bok-ecos-stats

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the user to run a runtime npx command that fetches and executes the remote package @nomadamas/k-skill which prints the "primary instructions" to follow (npx -y @nomadamas/k-skill@0 instruct bok-ecos-stats), and it also points to the GitHub instruction page (https://github.com/NomaDamas/k-skill/blob/main/bok-ecos-stats/instruction.md) as the source of those live instructions, so remote content fetched at runtime directly controls what the agent/user must follow.