sl

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs using an npx command that will fetch and execute remote code ("npx -y -p @stylusnexus/skill-loop-cli skill-loop-mcp"), which is a required MCP runtime dependency that runs external code and thus can directly control the agent environment.