enonic-app-manager

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's installation instructions include a runtime command that fetches and pipes a remote shell script into sh (wget -qO- https://repo.enonic.com/public/com/enonic/cli/installer/cli-linux/1.0.0/cli-linux-1.0.0.sh | sh), which executes remote code as a required step to install the Enonic CLI—this is a direct remote code execution risk.