oh-my-cli-autonomous-code-agent

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The INSTALLATION section instructs cloning and building remote code (git clone https://github.com/qwen-code-dev-bot/oh-my-cli.git followed by npm install/npm run build), which fetches and results in executing external code required to run the skill.