opt-ui-install

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill runs runtime package fetch/execute commands (e.g., npx @reopt-ai/opt-ui-cli and npm install/add @reopt-ai/opt-ui) that rely on the GitHub Packages registry URL https://npm.pkg.github.com, which will fetch and execute remote package code required by the workflow.