plugin-remover

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is an individual GitHub repository (not an official vendor) that you would clone and run deletion scripts from, so running it without inspecting the code and verifying the author's reputation/activity is risky.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill provides runtime commands that fetch and execute remote code via the source URL git+https://github.com/richfrem/agent-plugins-skills (e.g., uvx --from git+https://github.com/richfrem/agent-plugins-skills plugin-remove), so external repository content would be retrieved at runtime and used to control execution.