claude-pm-skills

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs execution of npx skills add to fetch and install third-party content from an unofficial GitHub repository (pratikshadake/claude-product-management-skills), introducing a common unofficial operational dependency.