android-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's installation commands fetch and execute remote scripts at runtime (e.g., curl -fsSL https://dl.google.com/android/cli/latest/linux_x86_64/install.sh | bash, https://dl.google.com/android/cli/latest/darwin_arm64/install.sh | bash, and https://dl.google.com/android/cli/latest/windows_x86_64/install.cmd downloaded-and-run), which downloads and runs remote code required for the skill.