renoise-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes runtime setup scripts fetching updates from download.renoise.ai and api.github.com via unauthenticated, mutable domain endpoints that lack immutable digests or official enterprise provenance in this context, constituting an unverifiable third-party operational dependency.