agent-readiness

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is a GitHub repository used as a direct installation source (uvx --from git+https://github.com/ambient-code/agentready), which can deliver and execute arbitrary code from an account of unknown trustworthiness, so it should be treated as suspicious unless you can verify the maintainer and repository integrity.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes uvx with --from git+https://github.com/ambient-code/agentready at runtime (references/assessment.md and references/remediation.md), which fetches and runs remote code (the agentready package) that the skill requires to produce assessments.