rust-docs

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL.md contains an installation command "curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh" which fetches and pipes a remote shell script to sh, i.e., it would execute remote code at runtime (https://sh.rustup.rs).