workflow-setup

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's recommended runtime command "npx -p @vm0/cli zero " (npx -p @vm0/cli zero ) will fetch and execute remote npm package code at runtime, which is remote-executed code the skill relies on.