marketing-design

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill executes pip install google-genai pillow as part of its documented setup, which retrieves packages from an external registry without cryptographic pinning, establishing an unverifiable runtime external dependency.