product-position

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime installation instructions invoke npx to fetch and execute code from the GitHub repo https://github.com/firatcand/founder-skills (via "npx skills add firatcand/founder-skills --skill product-position"), which downloads and runs remote code required for the full skill.