scenario-zbrush-paint-render

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The instruction instructs the agent to ask the user to install a remote skill using npx skills add scenario-labs/skills --skill <name>, which is an inbound operational dependency fetch from an external URL/registry locator (scenario-labs/skills), but since it uses an uncontrolled third-party repository path without strong provenance, it constitutes a weak/suspicious operational dependency under the dependency gate rules.