blender-community-skill-bootstrap

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs invoking a runtime installer to pull code from the upstream GitHub repository (repo: RobLe3/cc-blender-skill and license URL https://github.com/RobLe3/cc-blender-skill/blob/11016c9a5847897491dde935c346571bd7548e3d/LICENSE), which will fetch and install remote skill code that can execute or control agent behavior.