10x

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill contains an unverified remote installation script URL (https://superset.sh/cli/install.sh) in SKILL.md and scripts/audit.sh that is instructed to be fetched and executed via curl/sh if the CLI is missing, representing a high-risk unknown external operational dependency.