setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs runtime fetching/execution of remote code — it runs uvx --from git+https://github.com/upbit-official/upbit-strategy-toolkit.git (executes code from that repo at runtime) and points to install commands that execute remote scripts (curl ... https://astral.sh/uv/install.sh | sh and irm https://astral.sh/uv/install.ps1 | iex), so these URLs enable executing remote code during skill runtime.