oracle

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's runtime invokes npx -y @steipete/oracle (i.e., fetching and executing the remote package https://www.npmjs.com/package/@steipete/oracle) which runs remote code that bundles prompts and directly controls model interactions, so it is a required external runtime dependency that can control agent prompts.