setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes install commands run at runtime (e.g., via "npx" and "npm") that fetch and execute remote code from repositories such as https://github.com/vercel-labs/agent-browser, which directly pulls and runs external packages during setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly instructs running PowerShell with "-ExecutionPolicy Bypass" (bypassing a security mechanism) and directs the agent to execute global install commands and shell-run installers that modify the host environment.