book-cover-design

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs installing and executing the "belt" CLI via npx skills add belt-sh/cli and fetching install instructions from raw.githubusercontent.com/inference-sh/skills, but the CLI's repository org (belt-sh) does not match the branded service (inference.sh), leaving its publisher identity unverified, making this a weak/unknown operational dependency.