bun-runtime-expert

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's Quick Start includes installer commands that fetch and execute remote scripts (curl -fsSL https://bun.sh/install | bash and powershell -c "irm bun.sh/install.ps1 | iex"), which are runtime external dependencies that execute remote code.