voicebox-voice-mcp-agent

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill contains setup instructions executing remote installation scripts from third-party domains (bun.sh and rustup.rs) via curl without verifiable integrity checks, constituting a weak operational dependency.