data-viz-agent

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's installation step instructs running npx to fetch and execute code from the upstream repository (rohitg00/awesome-claude-code-toolkit — https://github.com/rohitg00/awesome-claude-code-toolkit), which causes remote code to be run at runtime and is required for the skill to function.