memoire-design-tooling

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The SKILL.md contains a runtime install command ("npx skills add sarveshsea/memi") and note.json lists the repository URL https://github.com/sarveshsea/memi, which would fetch and install remote skill code at runtime that can execute code or control agent prompts.