tao-run-on-brev

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs downloading and executing a remote installation script from https://raw.githubusercontent.com/brevdev/brev-cli/main/scripts/install-agent-skill.sh, representing a third-party/community (unofficial) operational dependency fetched at runtime, which triggers a medium severity rating.