codedrobe-one-shot-theme

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). High confidence: the skill invokes and (if codedrobe is not installed) shells out to run remote package code via "npx --yes @codedrobe/core@latest", which fetches and executes the @codedrobe/core package at runtime.