dos-verify-done-claims

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs installing and running the external PyPI package via "python -m pip install 'dos-kernel=='", which fetches and executes remote code (the dos CLI) required at runtime.