korean-bond-search

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill utilizes an npx command that retrieves and executes a package from an external registry (@nomadamas/k-skill), meeting the operational dependency criteria under an unofficial/unknown publisher tier.