iot-fleet

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill invokes npx to fetch and execute the remote npm package @claude-flow/plugin-iot-cognitum@latest at runtime (e.g., "npx -y -p @claude-flow/plugin-iot-cognitum@latest"), which downloads and runs external code that directly controls the agent's behavior.