tokenwise

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The install instructions (/plugin marketplace add CodeShuX/tokenwise, then /plugin install) fetch and install executable plugin material from a GitHub repository owned by an individual author, which is unofficial provenance and not a recognized vendor or independently authenticated source, so this is a common/reputable unofficial dependency (medium).

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (low risk: 0.35). The skill directs the agent to install a third-party plugin from a community repo and run an installer that rewrites CLAUDE.md and settings.json, which is an unprivileged but real change to agent configuration, though it involves no sudo, system files, accounts, or services.