markdown-viewer-skills

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill directs runtime installation via "npx skills add markdown-viewer/skills" (upstream: https://github.com/markdown-viewer/skills), which will fetch and execute remote package code at install time and is required for the skill to run, so it constitutes a runtime external dependency that can execute remote code.