bun-development

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's installation instructions download and execute remote installer scripts (curl https://bun.sh/install then bash "$tmpdir/bun-install.sh" and Invoke-WebRequest https://bun.sh/install.ps1 ...; powershell -File ...) which fetches and runs remote code at runtime, so these URLs present execution risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill instructs execution of remote installers and explicitly uses a PowerShell "ExecutionPolicy Bypass", which encourages bypassing a security mechanism and modifying the host system state by installing software.